Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 30 Sep 2000 14:42:09 -0400
From:      "Brian F. Feldman" <green@FreeBSD.org>
To:        Warner Losh <imp@village.org>
Cc:        Jordan Hubbard <jkh@winston.osd.bsdi.com>, Roman Shterenzon <roman@xpert.com>, Kris Kennaway <kris@FreeBSD.org>, security@FreeBSD.org
Subject:   Re: cvs commit: ports/mail/pine4 Makefile (fwd) 
Message-ID:  <200009301842.e8UIgA543368@green.dyndns.org>
In-Reply-To: Message from Warner Losh <imp@village.org>  of "Sat, 30 Sep 2000 12:16:26 MDT." <200009301816.MAA12880@harmony.village.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
> : Another possibility might be to force pine into a 
> : chroot... I guess the only good advice to give if you HAVE to run pine is to 
> : run it inside a jail.
> 
> I don't think that would work.
> 
> Warner

That is, one can create their own jail (or just chroot(8)... I should 
probably get user-chrooting reviewed ;) which they would use for running 
potentially evil things -- like reading e-mail with pine.  It's not too 
difficult, but it's really easier just to switch to a better MUA.

--
 Brian Fundakowski Feldman           \  FreeBSD: The Power to Serve!  /
 green@FreeBSD.org                    `------------------------------'




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009301842.e8UIgA543368>