Re: [Exim] suid exim

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: Philip Hazel
Fecha:  
A: Randy Bush
Cc: exim users
Asunto: Re: [Exim] suid exim
On Tue, 25 Apr 2000, Randy Bush wrote:

> when exim runs a .procmailrc
>
>     procmail_pipe:
>       driver = pipe
>       path = "PROCMAILDIR:/usr/local/bin:/usr/bin"
>       command = "/bin/procmail -d ${local_part}"
>       headers_remove = "reply-to"
>       return_path_add
>       check_string = "From "
>       escape_string = ">From "
>       user = "${local_part}"
>       group = mail

>
> it seems to be doing so as the user exim, not as the owner of the local_part
> in such a way that some progs notice. i.e. i am logging
>
>     Apr 24 04:05:50 rip op: user exim FAILED to execute 'dns.az.mv /var/dns/primary/az.8 /var/dns/primary/az.9'
>     Apr 24 04:05:50 rip op: user exim FAILED to execute 'dns.az.mv /var/dns/primary/az.7 /var/dns/primary/az.8'

>
> where op(1) is a system run-this-command-as-root-but-only-for-certain-users
> program.


Try running the delivery with -d9 set. It should tell you what uid/gid
it is setting when it runs the pipe. I expect it to be the local part -
otherwise I'd have been receiving many complaints!


> ps: excitement!
>
>   ph10@???:
>     SMTP error from remote mailer after RCPT TO:<ph10@???>:
>     host taurus.cus.cam.ac.uk [131.111.8.48]:
>     550 rejected:
>     administrative prohibition


Our postmaster seems to have put randy@??? on the black list. I will
endeavour to find out why! (And get you removed asap.)


-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.