Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!yale!cmcl2!uupsi!jpradley!jpr From: jpr@jpradley.jpr.com (Jean-Pierre Radley) Newsgroups: comp.mail.uucp Subject: Re: comp.mail.maps -> pathalias -> map Message-ID: <1991Jan19.214819.2391@jpradley.jpr.com> Date: 19 Jan 91 21:48:19 GMT References: <59425@aurs01.UUCP> <1991Jan12.183150.6640@jpradley.jpr.com> <212@raysnec.UUCP> Reply-To: jpr@jpradley.UUCP (Jean-Pierre Radley) Organization: NYC Public Unix Lines: 19 In article <212@raysnec.UUCP> shwake@raysnec.UUCP (Ray Shwake) writes: >jpr@jpradley.jpr.com (Jean-Pierre Radley) writes: > >>I was using plain old 'sh' to crack open the articles, until someone >>pointed out that this was a dangerous procedure. Now I use "unsharmap", >>which comes from the smail3.1 distribution. > > I've been using a miniscule shell script to break up and install the >maps, but run that script as an ordinary, not a priviledged, user. Thus, >were someone to "taint" the map submissions, any damage done by this >script would be minimal. Since the submissions are shell scripts, I wonder >what additional integrity checks are performed by unsharmap as compared to >our local script. Since you don't spell out what integerity checks your script performs, how could anyone compare it to the unsharmap program? -- Jean-Pierre Radley NYC Public Unix jpr@jpr.com CIS: 72160,1341