d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Apply the sendmail 8.9.3 denial-of-service patch which prevents untrusted

Browse Source 
users from running newaliases.  (This is to protect aliases.db against
truncation).

PR:		15088
This commit is contained in:
Peter Wemm 1999-11-25 18:03:05 +00:00
parent 2e43090e08
commit b518ca7de5
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/vendor/sendmail/dist/; revision=53696
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
contrib/sendmail/src/main.c
View File

@ -984,6 +984,18 @@ main(argc, argv, envp)
usrerr("Permission denied");
finis(FALSE, EX_USAGE);
}
if (OpMode == MD_INITALIAS &&
RealUid != 0 &&
RealUid != TrustedUid &&
!wordinclass(RealUserName, 't'))
{
if (LogLevel > 1)
sm_syslog(LOG_ALERT, NOQID,
"user %d attempted to rebuild the alias map",
RealUid);
usrerr("Permission denied");
finis(FALSE, EX_USAGE);
}
if (MeToo)
BlankEnvelope.e_flags |= EF_METOO;