How does sendmail get UUCP host names?

John Haxby jch at hollie.rdg.dec.com
Wed Mar 13 00:38:10 AEST 1991


In article <1991Mar12.130319.14972 at mp.cs.niu.edu>, rickert at mp.cs.niu.edu (Neil Rickert) writes:
|>  Mode 600 prevents someone running 'strings' on the freeze file.  But it is
|> pretty easy to coax 'sendmail' in to generating a core dump owned by the person
|> who invokes 'sendmail', and all the same information should be there.  This
|> risk is also present if you don't use a freeze file.

How?  sendmail catches the quit signal and you can't send it
your favourite core-dumping signal unless you are root.
Unless you have a dead-cert bug that makes sendmail
drop core every time ....
-- 
John Haxby, Definitively Wrong.
Digital				<jch at wessex.rdg.dec.com>
Reading, England		<...!ukc!wessex!jch>



More information about the Comp.unix.questions mailing list