Great Circle Associates Majordomo-Users
(December 1992)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: wrapper execution
From: Brent Chapman <brent @ GreatCircle . COM>
Date: Fri, 11 Dec 92 10:20:56 -0800
To: Micah Anderson <micah @ u . washington . edu>
Cc: majordomo-users @ GreatCircle . COM
In-reply-to: Your message of Sun, 6 Dec 92 17:09:24 -0800

# 
# 	I am attempting to install majordomo on a mmdf system (I have
# never seen mmdf before, and it is weird... anyhoo) and I was wondering
# really how wrapper worked. Considering one of the aliases is to call
# wrapper on majordomo, I tried doing that myself:
# mc% wrapper majordomo
# mc% wrapper majordomo
# majordomo: No such file or directory
# mc% wrapper
# USAGE: wrapper program [<arg> ...]
# mc% wrapper /u/spool/mmdf/majordomo/bin/majordomo
# wrapper: error: insecure usage
# 
# (that first line is a duplicate, shouldnt be there)
# 
# is that normal? Would it not do that if called by the mailer? or...?
# 
# Thanks
# Micah

Did you set the W_BIN variable in the Makefile to tell "wrapper" where
to look for "majordomo" and the other programs?

As a security measure, since it's running set-uid and set-gid,
"wrapper" will ONLY look for programs in that directory; not in the
current directory, and not in the normal PATH.  Also, as a security
measure, it won't run anything with a "/" in it.  This is all to keep
someone from being able to run random commands with the permissions
that "wrapper" grants.


-Brent
--
Brent Chapman                                   Great Circle Associates
Brent@GreatCircle.COM                           1057 West Dana Street
+1 415 962 0841                                 Mountain View, CA  94041




Indexed By Date Previous: Re: Archive server in Majordomo
From: Barbara Dyker <barb@locutus.cs.colorado.edu>
Next:
From: (nil)
Indexed By Thread Previous: wrapper execution
From: Micah Anderson <micah@u.washington.edu>
Next: Re: Archive server in Majordomo
From: Barbara Dyker <barb@locutus.cs.colorado.edu>

Google
 
Search Internet Search www.greatcircle.com