OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: INSTALL.sh
From: Marco d'Itri (mdlinux.it)
Date: Sun May 21 2000 - 07:40:08 CDT

This check is wrong:

if [ -f /usr/lib/sendmail ]
    then sendmail_path=/usr/lib/sendmail
    else sendmail_path=/usr/sbin/sendmail
fi

On a FHS-compliant linux system (I don't know any which is not in this
regard) the sendmail binary is installed as /usr/sbin/sendmail and
/usr/lib/sendmail is a compatibility symlink.
If the user does not override the default choice, "correct" programs will
still use Berkeley sendmail by calling /usr/sbin/sendmail.

I tried running the pipe mailer without privileges (because at least on
debian systems uux is setuid uucp and rmail does not need to be run with
as a special user) but pipe/pipe.c::drop_privileges() fails with:

May 21 14:34:11 wonderland postfix/pipe[1321]: fatal: set_eugid: seteuid(0): Operation not permitted

Is this impossible? Is this pointless? 

-- 
ciao,
Marco