From mboxrd@z Thu Jan 1 00:00:00 1970 From: Klaus Muth To: nobody@sourceware.cygnus.com Cc: gnats-prs@sourceware.cygnus.com Subject: Re: gnats/24 Date: Wed, 10 Nov 1999 07:14:00 -0000 Message-id: <19991110151400.21822.qmail@sourceware.cygnus.com> X-SW-Source: 1999-q4/msg00049.html List-Id: The following reply was made to PR gnats/24; it has been noted by GNATS. From: Klaus Muth To: gnats-gnats@sourceware.cygnus.com, mh@hagos.de, nobody@sourceware.cygnus.com Cc: Subject: Re: gnats/24 Date: Wed, 10 Nov 1999 16:12:39 +0100 Ok, I found the secure solution for RedHat, may work on all sendmail installation using smrsh: smrsh strips the path from an executable with s-Bit set and tries to find it in a special directory, according to O'Reilly's Sendmail Bible (Costales & Allman) this is /usr/adm/sm.bin. However, on my RedHat, it is /etc/smrsh/. The secure solution is to create a link in this dir: ln -s /etc/smrsh/queue-pr /usr/local/libexec/gnats/queue-pr klaus