Re: [Security-Discuss] setgid on /usr/sbin/sendmail.postfix

On Feb 11, 2005, at 9:24, Avi Schwartz wrote:

> A discussion on the expert list brought the fact that under certain 
> security levels (3 and up) /usr/sbin/sendmail.postfix has its setgid 
> bit set while at lower security levels it is clear.  I found it to be 
> the situation in both Mdk 10.0 and 10.1.  My question is why is there 
> a need to use setgid in the higher security levels where you'd expect 
> to find less of?

I suppose this is msec doing it.  You'd need to ask the msec author 
and/or the postfix author.  Doesn't make much sense to me, but I don't 
use postfix so can't tell you what the rationale behind it is.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}