Bug 15373

Summary: patch for sendmail 8.9.3 to avoid alias database deletion
Product: Base System Reporter: Udo Schweigert <ust>
Component: miscAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Udo Schweigert 1999-12-09 15:40:00 UTC
There is a bug in sendmail 8.x.x which allows a local user to destroy the
alias database by doing sendmail -bi and immediately sending an signal to
it.

Fix: The attached patch (taken from Debian GNU Linux) fixes the problems (in use
on our Mail-Server without problems for 2 days).

With this patch non-root users (exactly spoken: non-trusted users) 
are not able to rebuild the database (which is to me not a problem).
Comment 1 Sheldon Hearn freebsd_committer freebsd_triage 1999-12-09 15:46:28 UTC
State Changed
From-To: open->closed

Already fixed as per PR 15088.