[4962] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: SECURITY: Important fix for sendmail

daemon@ATHENA.MIT.EDU (Erik Troan)
Mon Nov 18 11:15:26 1996

Date: Mon, 18 Nov 1996 11:12:59 -0500 (EST)
From: Erik Troan <ewt@redhat.com>
To: redhat-list@redhat.com
In-Reply-To: <199611181530.QAA23162@minnie.xos.nl>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

On Mon, 18 Nov 1996, Jos Vos wrote:

> If this new revision (8.7.6-5) just includes an extra patch: can this
> patch be posted separately to this list, so that everybody running
> some 8.7.x sendmail with Red Hat 3.0.3 can regenerate the sendmail
> package without the need to extract the patch from the 4.0 SRPM (which
> is some work, given the new RPM format, etcetera)?

Sure, here it is:

--- sendmail-8.7.6/src/main.c.moron     Mon Nov 18 09:43:47 1996
+++ sendmail-8.7.6/src/main.c   Mon Nov 18 09:44:03 1996
@@ -1697,6 +1697,8 @@
                syslog(LOG_INFO, "restarting %s on signal", SaveArgv[0]);
 #endif
        releasesignal(SIGHUP);
+       (void) setgid(RealGid);
+       (void) setuid(RealUid);
        execv(SaveArgv[0], (ARGV_T) SaveArgv);
 #ifdef LOG
        if (LogLevel > 0)

Erik

-------------------------------------------------------------------------------
|       I told you I'm not very bright -- Sugar in "Some Like It Hot"         |
|                                                                             |
|   Erik Troan   =   http://sunsite.unc.edu/ewt/   =   ewt@sunsite.unc.edu    |


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post