Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2).

   From: Alan Brown <alan_at_manawatu.gen.nz>

   How many of these exploits are thwarted by setting sendmail.cf's
   O RunAsUser=postmaster switch, making /var/spool/mail and var/spool/mqueue
   664 postmaster.mail and giving postmaster a shell of /bin/false (C
   version, compiled -Bstatic.)

Not quite as many as simply getting rid of sendmail and using
something else. Has there ever been a security-related problem with
qmail?
Received on Nov 17 1996