OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Jacek Masiulaniec (jacekmcvs.openbsd.org)
Date: Sun Mar 01 2009 - 15:58:53 CST


CVSROOT: /cvs
Module name: src
Changes by: jacekmcvs.openbsd.org 2009/03/01 14:58:53

Modified files:
        usr.sbin/smtpd : smtpd.c smtpd.h util.c

Log message:
- Refuse delivery to mbox that is a symlink, pipe, chardev, etc. etc.
- Introduce secure_file, based on secure_filename from OpenSSH, it
checks that mbox has right perms, and that path components are
trustworthy, too.

ok gilles