Apply the sendmail 8.9.3 denial-of-service patch which prevents untrusted
users from running newaliases. (This is to protect aliases.db against truncation). PR: 15088
This commit is contained in:
parent
2e43090e08
commit
b518ca7de5
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/vendor/sendmail/dist/; revision=53696
@ -984,6 +984,18 @@ main(argc, argv, envp)
|
||||
usrerr("Permission denied");
|
||||
finis(FALSE, EX_USAGE);
|
||||
}
|
||||
if (OpMode == MD_INITALIAS &&
|
||||
RealUid != 0 &&
|
||||
RealUid != TrustedUid &&
|
||||
!wordinclass(RealUserName, 't'))
|
||||
{
|
||||
if (LogLevel > 1)
|
||||
sm_syslog(LOG_ALERT, NOQID,
|
||||
"user %d attempted to rebuild the alias map",
|
||||
RealUid);
|
||||
usrerr("Permission denied");
|
||||
finis(FALSE, EX_USAGE);
|
||||
}
|
||||
|
||||
if (MeToo)
|
||||
BlankEnvelope.e_flags |= EF_METOO;
|
||||
|
Loading…
Reference in New Issue
Block a user