Skip site navigation (1)Skip section navigation (2)
Date:      25 Jul 1996 17:26:47 -0400
From:      Michael Graff <explorer@flame.org>
To:        mike@NetworX.ie
Cc:        FreeBSD Bugs <freebsd-bugs@freebsd.org>
Subject:   Re: sendmail is suid root -- correct?
Message-ID:  <v6hgqw9g88.fsf@kechara.flame.org>
In-Reply-To: Michael Ryan's message of Wed, 24 Jul 1996 22:28:49 BST
References:  <ECS9607242249A@NetworX.ie>

next in thread | previous in thread | raw e-mail | index | archive | help
Michael Ryan <mike@NetworX.ie> writes:

> On my FreeBSD 2.1 box, sendmail is suid root.
> This means anybody can do a "sendmail -q",
> which I don't want them to be able to do.
> The sysadmin should have (sole) control over mail
> queue management.

This is a problem, since you can't really hide the binary, and you can't
remove the setuid bits.

There was a lot of talk about non-root mail programs.  I think I'll be
looking into qmail myself.

> Is it correct that sendmail should be suid-root?

Yes.

> If I remove the suid bit, what are the repercussions?

Mail will stop working I suspect.  Try it.  :)

--Michael



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v6hgqw9g88.fsf>