[5453] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: RedHat4.0 security

daemon@ATHENA.MIT.EDU (Piete Brooks)
Thu Nov 21 17:05:22 1996

To: redhat-list@redhat.com
In-reply-to: Your message of Thu, 21 Nov 1996 11:05:58 -0500.
             <Pine.LNX.3.93.961121105746.30935A-100000@redhat.com> 
Date: Thu, 21 Nov 1996 17:39:48 +0000
From: Piete Brooks <Piete.Brooks@cl.cam.ac.uk>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

> -rwsr-sr-x-     root     mail      72628 Oct 17 17:57 /usr/bin/mh/inc
> -rwsr-xr-x-     root     root      52536 Oct 17 17:57 /usr/bin/mh/msgchk
> Access /var/spool/mail

We don't use /var/spool/mail (.mail instead) but I thought that inc and msgchk
were suid root so as to allow (R)POP users to do things or some such ...
We remove it (and from login !).


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post