X-Message-Index: 070
X-Message-Prev: 069
X-Message-Next: 071
X-Thread-Prev: 074
X-Thread-Next: 075
From: bzs@bu-cs.BU.EDU (Barry Shein)
To: phage
X-To: bostic@okeeffe.Berkeley.EDU, comer, phage
Subject: Disassembled virus?
Date: Sun, 6 Nov 88 00:42:48 EST
X-Date: Sun 00:42:48 06/11/1988 EST


Keith writes...
>Not true; the sendmail bug gives you daemon, not root.  And daemon
>is not the hole that people seem to think it is, although it's not
>my idea of a good time.

Although off the subject of whether to distribute the code or not I
think that depends on how one sets up the configuration file, giving
F=S will fork mailers setuid root.

Anyhow, minor point, but perhaps folks out there now should look and
see if they have unnecessary S flags. This came up somewhere else
where someone (I'll leave him nameless) said he was about to send the
same comment to me and, upon glancing at his sendmail.cf, saw that in
fact the S flag was present in at least one mailer specification at
his site.

	-Barry Shein, ||Encore||