From mboxrd@z Thu Jan  1 00:00:00 1970
From: Klaus Muth <muth@hagos.de>
To: nobody@sourceware.cygnus.com
Cc: gnats-prs@sourceware.cygnus.com
Subject: Re: gnats/24
Date: Wed, 10 Nov 1999 01:24:00 -0000
Message-id: <19991110092400.28477.qmail@sourceware.cygnus.com>
X-SW-Source: 1999-q4/msg00047.html
List-Id: <gnats-prs.sourceware.org>

The following reply was made to PR gnats/24; it has been noted by GNATS.

From: Klaus Muth <muth@hagos.de>
To: gnats-gnats@sourceware.cygnus.com, mh@hagos.de,
        nobody@sourceware.cygnus.com
Cc:  
Subject: Re: gnats/24
Date: Wed, 10 Nov 1999 10:17:19 +0100

 I found another fix related to the 
 "queue-pr not available for sendmail programs"-Problem:
 
 The offending Program is smrsh: It is used in modern sendmail distributions
 for secure executing of "| blah" aliases.
 It seems, that queue-pr is not considered as secure (because of the
 s-bit maybe) and smrsh refuses to execute it.
 
 Fix: find the line "Mprog, ...." in /etc/sendmail.cf and replace
 /usr/sbin/smrsh with /bin/sh. Be aware: this seems to be a security hazard.
 I'll read on: Maybe, there is a way to convince smrsh, that queue-pr is secure.
 
 klaus