Path: utzoo!utgpu!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!cs.utexas.edu!milano!bigtex!james
From: james@bigtex.cactus.org (James Van Artsdalen)
Newsgroups: comp.mail.sendmail
Subject: Re: IDA Sendmail kit just went out
Message-ID: <10728@bigtex.cactus.org>
Date: 18 Nov 88 14:00:06 GMT
References: <10695@bigtex.cactus.org> <6129@zodiac.UUCP>
Reply-To: james@bigtex.cactus.org (James Van Artsdalen)
Organization: Institute of Applied Cosmology, Austin TX
Lines: 21

In <6129@zodiac.UUCP>, jordan@ads.com (Jordan Hayes) wrote:

> Um, how so?  The only other way to turn on debugging requires command
> line arguments, and if you run sendmail that way, the script will get
> run as you (not daemon)

Not true on my sendmail, which is 5.59 as distributed from Berkeley.

> to be sure, the "fix" that was distributed by UCB was not the best
> one, but it certainly closes that hole.

The distributed patch does not close the hole in the sense that it
merely makes the hole less accessible.  "less accessible" != "closed".

I currently know of no way to pipe to a program after the word "debug"
is removed without having login access to the machine already.  But
there are enough strange conditions in the code that I wonder if it
can't be done with the right cases of queuing, aliases & errors...
-- 
James R. Van Artsdalen      james@bigtex.cactus.org      "Live Free or Die"
Home: 512-346-2444 Work: 338-8789       9505 Arboretum Blvd Austin TX 78759