Mailinglist Archive: opensuse-security (260 mails)

< Previous Next >
Re: [suse-security] hardensuse <-> procmail -- (newaliases --->makemap) --
  • From: "Shin Sterneck/Jpn/TUV" <sterneck@xxxxxxxxxxx>
  • Date: Sun, 2 Jul 2000 19:59:18 +0900
  • Message-id: <OFBD45715B.3C4EDBA9-ON49256910.003BE321@xxxxxxxxxxx>

By the way:

the script : newaliases is just a small program, which executes makemap
(program, delivered by sendmail)
to generate hash encoded files. (faster access, since it consists of binary
info's).
You would use makemap also when modifying files in /etc/mail/.

the DIR /etc/mail includes a file aliases linked to /etc/aliases.

best regards

Shin Sterneck

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP 6.5.2
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=
=zE7l
-----END PGP PUBLIC KEY BLOCK-----





Roman Drahtmueller
<draht@uni-freibur To: Walter Krohe <wk@xxxxxxx>
g.de> cc: suse-security@xxxxxxxx
Sent by: Subject: Re: [suse-security] hardensuse
draht@xxxxxxxxxxxx <-> procmail
reiburg.de


07/01/2000 04:07
AM
Please respond to
draht






Dear Walter,

>
> Hi !
> Does the hardensuse script something wich make the mails in
> /var/spool/mail set to chmod 600 ?
>
> Sometimes I see in /var/log/warn:
> procmail[20002]: Insufficient privileges to deliver to "root"
> or similar.
>
> chmod 660 "by hand" -> /var/log/mail:
> procmail[22902]: Enforcing stricter permissions on
> "/var/spool/mail/root"
>
> Where can can I reset this behavior or is there a solution?
> Thanks for assistance.


The most convenient and reasonable solution for this problem doesn't even
touch its origin.

Forward mail sent to root to a dedicated, unpriviliged account. Reading
mails as root is definitely not a bright idea. Use /etc/aliases near the
end of the file for this purpose, and don't forget newaliases. :-)

Thanks,
Roman.
--
_ _
| Roman Drahtmüller "The best way to pay for a |
CC University of Freiburg lovely moment is to enjoy it."
| email: draht@xxxxxxxxxxxxxxx - Richard Bach |
- -


---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
For additional commands, e-mail: suse-security-help@xxxxxxxx





< Previous Next >
This Thread
  • No further messages