yes, davide.

mandrake 9.2 has msec installed. something very similar to tripwire.

i am having an interesting discussion in Xchat on 
kornbluth.freenode.net channel #Mandrake.

here's an excerpt:

cmyk: i think.. if a normal user can execute a app that only root can.. 
thats bad..
        <Roobarb-Work>  SUID means it runs with root privilages. if someonr 
hacks your mail server, they have root.
        <cmyk>  hrm...
        <cmyk>  are you 100% sure about that?
        <Redgore>       he is right
        <cmyk>  poll?
        <cmyk>  :)
        <noaxess>       cmyk: they are right..
        <cmyk>  shut up. you have no axess... :-b
        <noaxess>       :)
        <cmyk>  ok. i'll reformulate my qustion then...
        <cmyk>  what could i do, that xmail wouldn't need to run that scritp as 
root?

what do you say about all this?

cheers,
phil


On 12.11.2003, at 14:32, Davide Libenzi wrote:

>
> On Wed, 12 Nov 2003, Philipp Ringli wrote:
>
>> i've got xmail working now. but still have one major problem:
>>
>> permissions are set wrong by something:
>> -rwsr-xr-x 1 root root 11160 Sep 14 21:17 sendmail.xmail*
>> -rwx--x--x 1 root mail 105 Sep 14 21:17 sendmail.xmail.sh*
>
> # chmod a+s sendmail.xmail
>
>
>> i stopped the xmail server, made sure no process of it was running,
>> then i applied the right permissions to sendmail.xmail.sh
>> and then started xmail again:
>> -rwsr-xr-x 1 root mail 105 Sep 14 21:17 sendmail.xmail.sh*
>>
>> after a while the permissions are being reset by some other process:
>> -rwx--x--x 1 root mail 105 Sep 14 21:17 sendmail.xmail.sh*
>
> Is it running things like tripwire?
>
>
>
> - Davide
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
>
----------------------------
sichtwerk gmbh
werk2
fabrikstrasse 8
8370 sirnach
switzerland
*************************************
phone ++41 (0)71 960 07 70
and always mobile ++41 (0)79 750 87 74
[EMAIL PROTECTED]
http://www.sichtwerk.com

fight spammers:
X-Mulct: http://www.subsume.com/cgi-bin/go.pl?k=X-Mulct

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to