From mboxrd@z Thu Jan  1 00:00:00 1970
From: Rob Brewer <ipfire-devel@grantura.co.uk>
To: development@lists.ipfire.org
Subject: Re: sendEmail-1.56-1
Date: Wed, 06 Feb 2019 21:35:31 +0000
Message-ID: <q3fjv3$tob$1@tuscan3.grantura.co.uk>
In-Reply-To: <034C7493-33F3-4F53-BA30-02B1EEAA2462@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1992855735623001325=="
List-Id: <development.lists.ipfire.org>

--===============1992855735623001325==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hi Michael

Michael Tremer wrote:

> Hi,
> 
> Thanks for sending the patch.
> 
> I agree that 503.tape is incorrect, but would say that sendEmail should be
> owned by root.root and have 755 as permissions.
> 
> Why does the script need to become root when it is being executed by
> nobody? I think that is a security risk.
> 
Because those were the owners and permissions with sendEmail in IPCop and I 
have an IPCop addon that uses sendEmail to send my firewall logs to Dshield. 
I dont think a group ID of nobody is essential for this addon though.

The addon based on the IPCop logsend addon been running for the last few 
months on my IPFire but need a little more work before I can release it 
here.

(watch this space :) )

Rob

--===============1992855735623001325==--