[exim-dev] What user should ${run...} in config file run as?

Top Page
This message is part of the following thread:
M---+-\the complete thread tree sorted by date
M-+\M\M\ 
M\MMMMMMTed Cooper at ->
Delete this message
Reply to this message
Author: David Woodhouse
Date:  
To: exim-dev
New-Topics: [exim-dev] Security of ${dlfunc
Subject: [exim-dev] What user should ${run...} in config file run as?
Why the hell did this work anyway?

cat > e.conf<<'EEE'
spool_directory = ${run{/bin/chown root:root /var/spool/exim4/setuid}} ${run{/bin/chmod 4755 /var/spool/exim4/setuid}}
EEE
exim -Ce.conf -q

Why are we invoking ${run...} directives in the config file as root? Why
aren't we doing it as the Exim user?

--
dwmw2


This message was posted to the following mailing lists:
Exim-dev
Mailing List Info | Nearby Messages		<-[exim-dev] External barriers to privilege escalationRe: [exim-dev] What user should ${run...} in config file run as?->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)