Re: Need some very very basic help with Maildrop please

On 11/12/2011 04:54 PM, Fabio Catunda wrote:
> Brian,
>>> In this case, I believe that it's normal for maildrop, look:
>> Not sure which point exactly you are referring to above?
> It's normal that maildrop refuse to delivery an e-mail to user "brian"
> been called by user "fetchmail"...
>>> # man maildrop
>>> ... -d user
>>> .... In all cases, the -d option is allowed if user is the same user
>>> who is running maildrop.
>> Yeah read that, but I must say I dont understand it. Fetchmal runs
>> with USER= Fetchmail
>> So if the -d parm can only be the same as the USER running maildrop,
>> then I could only use fetchmail as the user there. True?
> ... and this is normal too.
> There is a reason for all this restriction... maildrop usually is set
> SUID, so it's a big risk for the system to allow anyone to call it,
> imagine that someEvilUser wants to make something bad with you, he could
> just run something like that:
> while [ 1 ] ; do
>     echo "ByeByeHardDrive" | maildrop -d brian
> done
>
> After some time you would have no more free space on your HD! :-D
>
> That is the reason that maildrop allow only a fell users to call it.
> Usually, only root and mail users can call maildrop with -d parameter
> setted to something. I believe that you can specify a list of valid
> users on compile time, but I'm not really sure.
>
> Another idea that I can give to you is to try to run fetchmail as "mail"
> user, maybe it works.
>>
>> I am the only one that has access to the server, so I can try it like
>> that. But I assume it must be possible with a different user.
> Also... try to run fetchmail with your user... as you're the only one
> acessing it, it might work.
>
> Good luck!
>
> Fábio Catunda.
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Courier-maildrop mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/courier-maildrop
Hi,

running as mail or root didn't make a noticeable difference.

Cheers

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1

_______________________________________________
Courier-maildrop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/courier-maildrop