all right then! i am feeling better now. by the way... this issue with msec on mdk 9.2. i could resolve it without decreasing the security level. issue drakperm in terminal on mdk box as su. this will launch a nice gui to add stuff that shouldn't be changed by msec.
cheers, phil On 13.11.2003, at 01:48, Davide Libenzi wrote: > > On Wed, 12 Nov 2003, Philipp Ringli wrote: > >> mandrake 9.2 has msec installed. something very similar to tripwire. >> >> i am having an interesting discussion in Xchat on >> kornbluth.freenode.net channel #Mandrake. >> >> here's an excerpt: >> >> cmyk: i think.. if a normal user can execute a app that only root >> can.. >> thats bad.. >> <Roobarb-Work> SUID means it runs with root privilages. if someonr >> hacks your mail server, they have root. >> <cmyk> hrm... >> <cmyk> are you 100% sure about that? >> <Redgore> he is right >> <cmyk> poll? >> <cmyk> :) >> <noaxess> cmyk: they are right.. >> <cmyk> shut up. you have no axess... :-b >> <noaxess> :) >> <cmyk> ok. i'll reformulate my qustion then... >> <cmyk> what could i do, that xmail wouldn't need to run that scritp >> as >> root? >> >> what do you say about all this? > > Hmm ... don't they have a MILF chat-room? :) > Seriously, sendmail.xmail is *not* the server. Is a stupid program that > drops stuff inside spool/local. XMail runs as root too, but you can > run it > as non root if you want (see XMail home page, there should be a link). > > > > - Davide > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > > ---------------------------- sichtwerk gmbh werk2 fabrikstrasse 8 8370 sirnach switzerland ************************************* phone ++41 (0)71 960 07 70 and always mobile ++41 (0)79 750 87 74 [EMAIL PROTECTED] http://www.sichtwerk.com fight spammers: X-Mulct: http://www.subsume.com/cgi-bin/go.pl?k=X-Mulct - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
