Re: SUID pop3 / imap4?

[Sam Roberts]

Sounds like ssh isn't starting pop3d as root, shouldn't that be the
fix?

It needs to do a setuid() to the user's ID as well, which also can't be
done if you don't have root privs.

Sam

Quoteing address@hidden, on Wed, Apr 03, 2002 at 06:37:55AM -0800:
> I got a bug report from someone who has been doing pop3 over ssh with
> qpopper before we switched to mailutils.  I can reproduce it easily
> enough:
> 
> address@hidden:~$ /usr/sbin/pop3d 
> Error setting mail group: Operation not permitted
> address@hidden:~$ ls -al /usr/sbin/pop3d
> -rwxr-xr-x    1 root     root        33832 Feb 21 21:07 /usr/sbin/pop3d
> 
> I'm not sure what the Right Thing is here.  I can set the pop3d to be
> SUID root, which allows it to work.  I tried making it SUID mail, and
> it loads, but it can't get past pam.
> 
> I just hate SUID binaries... =)
> 
> The followup question is: Should the Makefile install it chmod +s, or
> should just the Debian package do it?
> 
> -- 
> "Frankly, trying to turn Windows into a decent educational software
> development platform is about as fun as jumping naked into a pit of
> rabid wolves."
>  - As seen on slashdot
> 
> _______________________________________________
> Bug-mailutils mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/bug-mailutils

-- 
Sam Roberts <address@hidden> (Vivez sans temps mort!)