[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: mail.local vs. Smail3



Louis Bertrand wrote:

> The way to do this is to patch mail.local to first check gid against 
> the mail gid (if so, /var/mail is gid=mail) or revert to the
> must-run-as-root behaviour.

Why not remove the stupid check altogether?  These "if (uid!=0)"
add *no* security value and are just annoyance.  Just open the
mailbox for appending; if open() fails, say why and exit with
an appropriate error code.