hudgens@sun13.SCRI.FSU.EDU (Jim Hudgens) (02/12/91)
Anyone have any problems with this combination??? The following message appears when invoking rmail in xemacs on a rs6000. movemail: permission denied for temporary file "/usr/spool/mail/EJCICrx" The easy solution is to change permissions of /usr/spool/mail. I hesitate to do that since the permissions are so different from other machines, that it might be opening up some sort of security hole. Has anyone dealt with this in a sane way? We're running 18.56, which is otherwise almost perfect on these machines. Thanks for any info. -- Disclaimer: I didn't do it. Jim Hudgens Supercomputer Computations Research Institute hudgens@sun13.scri.fsu.edu
marc@arnor.uucp (02/12/91)
It works, and is reasonably safe, to set movemail to be group mail, and SGID. (DO NOT make it suid root, this is more than it needs). From reading the code, it may be possible to exploit a small window and attack another mail file, but thats the worst exposure I can see. -- Marc Auslander <marc@ibm.com>