Checksum: 35025
Path: utzoo!utgpu!woods
From: woods@gpu.utcs.toronto.edu (Greg Woods)
Date: Sun, 9-Oct-88 00:56:39 EDT
Message-ID: <1988Oct9.005639.6535@gpu.utcs.toronto.edu>
Organization: G. A. W. Consulting
Newsgroups: comp.sources.bugs
Subject: Re: smail 2.5 bug
Summary: Use setgid() instead.
References: <2800010@kailand> <2800011@kailand>
Reply-To: woods@gpu.utcs.Toronto.EDU (Greg Woods)

In article <2800011@kailand> pwolfe@kailand.KAI.COM writes:
>
>When I upgraded from smail v2.3 to v2.5, I must have accidentally munged the
>permissions on the logfile (/usr/spool/uucp/mail.log).  Apparently, that file
>needs to be world writable for outgoing mail to be logged.  Everything works
>now.

I find it much more secure to make /bin/smail set-group-id-on-execution
to some unique group, and to make /usr/spool/uucp/mail.log writable by
the same group.

If you use the info in mail.log to audit mail on your system, you don't
want the audit file to be world-writable!
-- 
						Greg Woods.

UUCP: utgpu!woods, utgpu!{ontmoh, ontmoh!ixpierre}!woods, tmsoft!ixpierre!woods
VOICE: (416) 443-1734 [h]		LOCATION: Toronto, Ontario, Canada