Re: Need some very very basic help with Maildrop please

Fabio Catunda <[email protected]>
Newsgroups gmane.mail.maildrop
Message-ID <[email protected]>
Brian,
>> In this case, I believe that it's normal for maildrop, look:
>
> Not sure which point exactly you are referring to above?
It's normal that maildrop refuse to delivery an e-mail to user "brian" 
been called by user "fetchmail"...
>
>> # man maildrop
>> ... -d user
>> .... In all cases, the -d option is allowed if user is the same user 
>> who is running maildrop. 
> Yeah read that, but I must say I dont understand it. Fetchmal runs 
> with USER= Fetchmail
> So if the -d parm can only be the same as the USER running maildrop, 
> then I could only use fetchmail as the user there. True?
... and this is normal too.
There is a reason for all this restriction... maildrop usually is set 
SUID, so it's a big risk for the system to allow anyone to call it, 
imagine that someEvilUser wants to make something bad with you, he could 
just run something like that:
while [ 1 ] ; do
   echo "ByeByeHardDrive" | maildrop -d brian
done

After some time you would have no more free space on your HD! :-D

That is the reason that maildrop allow only a fell users to call it. 
Usually, only root and mail users can call maildrop with -d parameter 
setted to something. I believe that you can specify a list of valid 
users on compile time, but I'm not really sure.

Another idea that I can give to you is to try to run fetchmail as "mail" 
user, maybe it works.
>
>
> I am the only one that has access to the server, so I can try it like 
> that. But I assume it must be possible with a different user.
Also... try to run fetchmail with your user... as you're the only one 
acessing it, it might work.

Good luck!

Fábio Catunda.

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.