Great Circle Associates Majordomo-Users
(January 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Security issues
From: Mentor Cana <mentor @ alb-net . com>
Organization: "http://www.alb-net.com/"
Date: Sun, 24 Jan 1999 23:13:52 -0500 (EST)
To: Sam Smith <sams @ techie . com>
Cc: majordomo-users @ GreatCircle . COM
In-reply-to: <188b8ac948%sams@mrbounce.compsoc.man.ac.uk>
Reply-to: Mentor Cana <mentor @ alb-net . com>

On Sun, 24 Jan 1999, Sam Smith wrote:
> I run a list of 1000+ people. All the settings in MD are set so
> that the list is totally locked down, to external users, and no
> one can see who is on the list in any way. Except one. People who
> have a login on the machine (it does lots of other things
> besides being the MD server, mail, DNS and login are among a
> few; so there are 400+ members with logins on box) can cd the
> /majordomo/lists directory, and grab the file which contains all
> the list addresses.
 
> I have spoken with the majordomo-owner, but his opinion is that
> setting the directory or file permissions to something like 700
> or similar would, as well as making it secure, make sendmail
> distinctly unhappy and as a consequence, not send out mail. 

Hello,

For the same reasons you've mentioned above, I've set the files that
contain the e-mail addresses to 660 and everything works OK..... Is that a
solution?

later,
Mentor



References:
Indexed By Date Previous: Re: Upgrading from RH 4.2 to RH 5.2
From: Jeff Rose <jrose@elug.org>
Next: Re: Security issues
From: "Jason Cerovac" <jason@cartman.northeast.net>
Indexed By Thread Previous: Security issues
From: Sam Smith <sams@techie.com>
Next: Re: Security issues
From: "Jason Cerovac" <jason@cartman.northeast.net>

Google
 
Search Internet Search www.greatcircle.com