From: Vincent Danen (vdanenmandrakesoft.com)
Date: Fri Feb 11 2005 - 11:42:59 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Feb 11, 2005, at 9:24, Avi Schwartz wrote:

> A discussion on the expert list brought the fact that under certain
> security levels (3 and up) /usr/sbin/sendmail.postfix has its setgid
> bit set while at lower security levels it is clear. I found it to be
> the situation in both Mdk 10.0 and 10.1. My question is why is there
> a need to use setgid in the higher security levels where you'd expect
> to find less of?

I suppose this is msec doing it. You'd need to ask the msec author
and/or the postfix author. Doesn't make much sense to me, but I don't
use postfix so can't tell you what the rationale behind it is.

--
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C A2BC 2EBC 5E32 FEE3 0AD4}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFCDO6jLrxeMv7jCtQRArnxAKCZuahsOXwWWL8kp5SE3eutM30OJACeJdub
O9mFLbB282VTt8aoyI3JHDs=
=F5ef
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]