Re: hung smtp processes again

[Matti Aarnio <mea@nic.funet.fi>]

> On Tue, 8 Apr 1997, Matti Aarnio wrote:
> > 	Yes, that one has gone over the deep end.  It is also from the
> > 	time before the great setjmp()/longjmp() rewamp.
> > 
> > 	I betcha you are not using my 2.99.48-970407.tar.gz,
> > 	as it does not have 'p3' for it...
> > 
> > 	Yes, the version numbers at my workstation are -- challenging..
> 
> OK, I just compiled up your latest 2.99.48-970407 version and I got the
> same thing again.

	Oooo...

> Also, on Linux, I notice something disturbing.  Remembering the security
> alert from unc.edu about how it was easy to get 'root' with the right
> .forward file, I set up a .forward file in my directory and mailed myself
> a message with the verbose option on.  While I did not try to actually get
> 'root' with my .forward file (why would I?  I know the passwd ... :-) ),
> the transport agent said it executed the pipe with uid=0 and gid=0.  Is
> there a fix for this or have I set something up incorrectly? 

	Three bugs.  'mailbox' prints out data from uninitialized
	variables.  When initialized, they were zero :-(

	As to why -- the third component on the recipient address
	contained spaces, but without proper quotes:
		|cat > /dev/null
	when it should have been:
		"|cat > /dev/null"

	First fix was to modify the first instance of:
		\|.+
	at the  rrouter.cf  to:
		|.+
	so that it matches the pipes...

	But I went ahead and 'overdid' the fix by armoring the router
	to always to produce a proper quoted string, but also do some
	tests at the mailbox to see that the input values make sense..

	.....

	Ok, I made a diff (patch, 7.4kB) containing my current
	source state.  Available now.

	Back to figuring out why you see the process stuck.
	Datapoints are welcomed.

> Roy
> rcb@press-gopher.uchicago.edu

	/Matti Aarnio