From owner-freebsd-security Fri Aug 6 4:59:45 1999 Delivered-To: freebsd-security@freebsd.org Received: from uni-sb.de (uni-sb.de [134.96.252.33]) by hub.freebsd.org (Postfix) with ESMTP id AA3D415005 for ; Fri, 6 Aug 1999 04:59:18 -0700 (PDT) (envelope-from netchild@Vodix.CS.Uni-SB.de) Received: from work.net.local (maxtnt-086.telip.uni-sb.de [134.96.70.213]) by uni-sb.de (8.9.3/1999070600) with ESMTP id NAA01302; Fri, 6 Aug 1999 13:59:11 +0200 (CEST) X-Authentication-Warning: uni-sb.de: Host maxtnt-086.telip.uni-sb.de [134.96.70.213] claimed to be work.net.local Received: from Vodix.CS.Uni-SB.de (localhost.net.local [127.0.0.1]) by work.net.local (8.9.3/8.9.3) with ESMTP id NAA01057; Fri, 6 Aug 1999 13:40:36 +0200 (CEST) (envelope-from netchild@Vodix.CS.Uni-SB.de) Message-Id: <199908061140.NAA01057@work.net.local> Date: Fri, 6 Aug 1999 13:40:35 +0200 (CEST) From: A.Leidinger@WJPServer.CS.Uni-SB.de Subject: Re: group bits To: Anthony Kimball Cc: freebsd-security@FreeBSD.ORG In-Reply-To: <14249.52685.50332.808817@avalon.east> MIME-Version: 1.0 Content-Type: TEXT/plain; CHARSET=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 5 Aug, Anthony Kimball wrote: > My specific motivation is that everytime I cvsup, I have to patch > sendmail and ppp to suppress their group-writable-config /usr/src/contrib/sendmail/cf/README: ---snip--- confUNSAFE_GROUP_WRITES UnsafeGroupWrites [False] If set, group-writable :include: and .forward files are considered "unsafe", that is, programs and files cannot be directly referenced from such files. World-writable files are always considered unsafe. ---snip--- should do it. Bye, Alexander. -- Hey, it's not like the whole building burned down. http://netchild.home.pages.de A.Leidinger+Home @ WJPServer.CS.Uni-SB.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message