Milter-greylist

Two problems around /tmp/access-list.debug:

* It is very dangerous to create a file at /tmp naively, especially
with root privilege.

* "\n" is missing.

On Fri, Oct 06, 2006 at 11:45:51PM +0900, AIDA Shinra wrote:
> Two problems around /tmp/access-list.debug:
> * It is very dangerous to create a file at /tmp naively, especially
> with root privilege.

Why? It's a write-only file with no sensitive information...


-- 
Emmanuel Dreyfus
manu@...

At Fri, 6 Oct 2006 15:22:37 +0000,
Emmanuel Dreyfus wrote:
> 
> On Fri, Oct 06, 2006 at 11:45:51PM +0900, AIDA Shinra wrote:
> > Two problems around /tmp/access-list.debug:
> > * It is very dangerous to create a file at /tmp naively, especially
> > with root privilege.
> 
> Why? It's a write-only file with no sensitive information...
ln -s /etc/passwd /tmp/access-list.debug

AIDA Shinra <shinra@...> wrote:

> > > Two problems around /tmp/access-list.debug:
> > > * It is very dangerous to create a file at /tmp naively, especially
> > > with root privilege.
> > 
> > Why? It's a write-only file with no sensitive information...
> ln -s /etc/passwd /tmp/access-list.debug

Ok, since it's only used for debugging and on an older FreeBSD release,
I ifdef'ed it. People that need it will enable it and change the path.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...