Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!watmath!clyde!rutgers!sri-unix!sri-spam!mordor!lll-lcc!ptsfa!dual!forbrk!mats
From: mats@forbrk.UUCP
Newsgroups: comp.unix.questions
Subject: Re: keeping your mailbox secure, even with mailx
Message-ID: <181@forbrk.UUCP>
Date: Mon, 26-Jan-87 11:31:18 EST
Article-I.D.: forbrk.181
Posted: Mon Jan 26 11:31:18 1987
Date-Received: Fri, 30-Jan-87 02:22:25 EST
References: <121@falkor.UUCP> <5620@cbrma.att.com>
Reply-To: mats@forbrk.UUCP (0000-Admin(0000))
Organization: Fortune Systems/Berkeley, Berkeley CA
Lines: 16

If someone took the trouble to look at the mailx (for System V)
or Mail (for BSD) documentation (manpage for mailx; one needs 
to go hunting for the Mail Reference Manual for Mail) they would
find that there is a way (set keep in your .mailrc) to tell those 
programs not to delete your mailbox even when empty. In this 
manner, changed mode settings will be preserved, and nobody has 
to change the default behavior of the mail delivery program 
(usually /bin/mail).

Additionally, mailx depends on mail files being mode 660, but
with group "mail" (not your group). This is so that it does
not have to run setuid root to manipulate your mailbox - it
can run setgid mail instead, which seems somewhat safer.

Mats Wichmann
Fortune Systems