Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!bywater!arnor!arnor!marc From: marc@arnor.uucp Newsgroups: comp.emacs Subject: Re: rmail and aix3.1 on ibm rs 6000 Message-ID: Date: 12 Feb 91 13:42:24 GMT References: Sender: news@arnor.uucp (NNTP News Poster) Distribution: na Organization: IBM T.J. Watson Research Center, Hawthorne, New York Lines: 9 In-Reply-To: hudgens@sun13.SCRI.FSU.EDU's message of 11 Feb 91 20:16:42 GMT It works, and is reasonably safe, to set movemail to be group mail, and SGID. (DO NOT make it suid root, this is more than it needs). From reading the code, it may be possible to exploit a small window and attack another mail file, but thats the worst exposure I can see. -- Marc Auslander