Xref: utzoo news.sysadmin:2792 news.software.b:4209
Path: utzoo!utstat!helios.physics.utoronto.ca!jarvis.csri.toronto.edu!cs.utexas.edu!samsung!uakari.primate.wisc.edu!uflorida!ziggy!usfvax2!tct!chip
From: chip@tct.uucp (Chip Salzenberg)
Newsgroups: news.sysadmin,news.software.b
Subject: Re: Summary: Integrating Internet mail with News
Message-ID: <25E04FE1.30C3@tct.uucp>
Date: 19 Feb 90 19:58:25 GMT
References: <1990Feb12.141913.2515@cs.hope.edu> <4548@becker.UUCP>
Organization: ComDev/TCT, Sarasota, FL
Lines: 15

According to bdb@becker.UUCP (Bruce Becker):
>If you're running "smail" there is a patch
>which implements "|/usr/lib/news/xx..." in
>the "aliases" file...

Beware!  The Smail 2.5 patches I've seen are insecure, in that a user
may put "|some_random_program" in his .forward, and get it executed in
the context of the user "uucp" (or even root, depending on the
circumstances).

As usual, I point to my Deliver 2.0 program as a way to get the
desired feature (pipe aliases) without the security hassles.
-- 
Chip Salzenberg at ComDev/TCT   <chip%tct@ateng.com>, <uunet!ateng!tct!chip>
          "The Usenet, in a very real sense, does not exist."