Re: Starnge bug.

[Rich Pieri <rich.pieri@PrescientTech.com>]

-----BEGIN PGP SIGNED MESSAGE-----

>>>>> "Leo" == Carsten Leonhardt <leo@arioch.tng.oche.de> writes:

Leo> I solved with by making movemail setgid mail. You'll have to decide
Leo> for yourself if movemail is secure enough for that.

It would be easy to argue that it is not, since there is no security or
authentication involved in movemail.  It would be trivial for someone to
use this to overwrite other files writable by group mail.

What I prefer to do is to make the mail spool directory mode 777 and +t,
which allows anyone to write there but not delete any files they do not
own, similar to /tmp.  The sysmonster needs to keep an eye on it,
though, to prevent people from using it as /tmp... or a script that
deletes any file with a name that is not equal to the file's owner.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv

iQCVAwUBMvpEj56VRH7BJMxHAQGAxgP/YMIdfLDjIagBUh2C9rR0let2jJgd+CEl
D16JxwqCQy8mZyiyGXVU+VfIW06aF7H8mSwyK3MDJE+rSD9B0e6Y8PAhP4sRY2UR
t7Dk0Iix7EfnDAz1NQRTCRHbbNxe8BnK7KhsjPU89QAymNirRGKooKRPC0H4Wj8s
wqZw2Yv3iAo=
=Hqb5
-----END PGP SIGNATURE-----
-- 
Rich Pieri <rich.pieri@prescienttech.com> | Happy Fun Ball may stick to certain
Prescient Technologies, Inc.              | types of skin.
A Stone & Webster Company                 | 
I speak for myself, not PTI or SWEC       |