Gentoo Archives: gentoo-dev

From: Georgi Georgiev <chutz@×××.net>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Abusing RESTRICT={no,}userpriv (was [RFC] ACCEPT_RESTRICT for questionable values of RESTRICT)
Date: Sat, 13 Jan 2007 04:07:32
Message-Id: 20070113040327.GA39192@lion.gg3.net
In Reply to: Re: [gentoo-dev] Abusing RESTRICT={no,}userpriv (was [RFC] ACCEPT_RESTRICT for questionable values of RESTRICT) by "Robin H. Johnson"
1 maillog: 12/01/2007-15:08:15(-0800): Robin H. Johnson types
2 >
3 > The vpopmail stuff has/has a similar issue (upstream is working on
4 > solving it via a different avenue at which point the problem will go
5 > away).
6
7 But I tried "emerge vpopmail" on a clean system... the /var/vpopmail/lib and
8 include directories along with all files in them are in fact world readable.
9 And there is exactly one vpopmail ebuild in the portage tree.
10
11 Here is what happens after emerge vpopmail (with an empty PORTDIR_OVERLAY
12 variable) on a system without a vpopmail user and a /var/vpopmail directory:
13
14 possum ~ # find /var/vpopmail -ls
15 349264 0 drwxr-xr-x 7 vpopmail root 192 Jan 13 12:54 /var/vpopmail
16 471847 1 drwxr-xr-x 2 root root 784 Jan 13 12:54 /var/vpopmail/bin
17 476915 80 -rwx--x--x 1 root root 79832 Jan 13 12:54 /var/vpopmail/bin/vchangepw
18 476916 80 -rwx--x--x 1 root root 81016 Jan 13 12:54 /var/vpopmail/bin/vdeloldusers
19 476917 104 -rwx--x--x 1 root root 103960 Jan 13 12:54 /var/vpopmail/bin/vpopmaild
20 476918 88 -rwx--x--x 1 root root 86392 Jan 13 12:54 /var/vpopmail/bin/vpopbull
21 478459 4 -rwxr-xr-x 1 root root 1480 Jan 13 12:54 /var/vpopmail/bin/vpopmail-Maildir-dotmaildir-fix.sh
22 476919 80 -rwx--x--x 1 root root 79128 Jan 13 12:54 /var/vpopmail/bin/vkill
23 476920 80 -rwx--x--x 1 root root 81208 Jan 13 12:54 /var/vpopmail/bin/dotqmail2valias
24 476921 84 -rwx--x--x 1 root root 83352 Jan 13 12:54 /var/vpopmail/bin/vconvert
25 476922 80 -rwx--x--x 1 root root 79800 Jan 13 12:54 /var/vpopmail/bin/vaddaliasdomain
26 476923 80 -rwx--x--x 1 root root 79352 Jan 13 12:54 /var/vpopmail/bin/vdeluser
27 476924 80 -rwx--x--x 1 root root 78616 Jan 13 12:54 /var/vpopmail/bin/clearopensmtp
28 476925 84 -rwx--x--x 1 root root 82264 Jan 13 12:54 /var/vpopmail/bin/vdominfo
29 476926 80 -rwx--x--x 1 root root 79800 Jan 13 12:54 /var/vpopmail/bin/vdeldomain
30 478432 84 -rwx--x--x 1 root root 83896 Jan 13 12:54 /var/vpopmail/bin/vuserinfo
31 478435 80 -rwx--x--x 1 root root 78648 Jan 13 12:54 /var/vpopmail/bin/vmkpasswd
32 478437 84 -rwx--x--x 1 root root 83128 Jan 13 12:54 /var/vpopmail/bin/vmoduser
33 478440 84 -rwx--x--x 1 root root 82264 Jan 13 12:54 /var/vpopmail/bin/valias
34 478441 92 -rws--x--x 1 root vpopmail 90624 Jan 13 12:54 /var/vpopmail/bin/vchkpw
35 478433 80 -rwx--x--x 1 root root 79704 Jan 13 12:54 /var/vpopmail/bin/vipmap
36 478443 84 -rwx--x--x 1 root root 82264 Jan 13 12:54 /var/vpopmail/bin/vadduser
37 478439 80 -rwx--x--x 1 root root 80056 Jan 13 12:54 /var/vpopmail/bin/vsetuserquota
38 478442 92 -rwx--x--x 1 root root 90456 Jan 13 12:54 /var/vpopmail/bin/vmoddomlimits
39 478444 80 -rwx--x--x 1 root root 79640 Jan 13 12:54 /var/vpopmail/bin/vpasswd
40 478438 88 -rwx--x--x 1 root root 88888 Jan 13 12:54 /var/vpopmail/bin/vdelivermail
41 478434 84 -rwx--x--x 1 root root 82264 Jan 13 12:54 /var/vpopmail/bin/vadddomain
42 478465 0 lrwxrwxrwx 1 root root 31 Jan 13 12:54 /var/vpopmail/doc -> /usr/share/doc/vpopmail-5.4.16/
43 666770 0 drwxr-xr-x 2 root root 160 Jan 13 12:54 /var/vpopmail/etc
44 666771 0 lrwxrwxrwx 1 root root 18 Jan 13 12:54 /var/vpopmail/etc/vpopmail.mysql -> /etc/vpopmail.conf
45 469894 4 -rw-r--r-- 1 root root 1143 Jan 13 12:54 /var/vpopmail/etc/vlimits.default
46 469892 4 -rw-r--r-- 1 root root 24 Jan 13 12:54 /var/vpopmail/etc/inc_deps
47 469893 4 -rw-r--r-- 1 root root 80 Jan 13 12:54 /var/vpopmail/etc/lib_deps
48 666772 0 drwxr-xr-x 2 vpopmail vpopmail 80 Jan 13 12:54 /var/vpopmail/lib
49 478436 172 -rw-r--r-- 1 root root 175382 Jan 13 12:54 /var/vpopmail/lib/libvpopmail.a
50 666773 0 drwxr-xr-x 2 vpopmail vpopmail 96 Jan 13 12:54 /var/vpopmail/domains
51 478450 0 -rw-r--r-- 1 root root 0 Jan 13 12:54 /var/vpopmail/domains/.keep_net-mail_vpopmail-0
52 666783 0 drwxr-xr-x 2 root root 200 Jan 13 12:54 /var/vpopmail/include
53 469898 8 -r--r--r-- 1 root root 7679 Jan 13 12:54 /var/vpopmail/include/vpopmail_config.h
54 469900 8 -r--r--r-- 1 root root 7679 Jan 13 12:54 /var/vpopmail/include/config.h
55 469903 8 -r--r--r-- 1 root root 4342 Jan 13 12:54 /var/vpopmail/include/vauth.h
56 469905 4 -r--r--r-- 1 root root 2062 Jan 13 12:54 /var/vpopmail/include/vlimits.h
57 469899 8 -r--r--r-- 1 root root 8192 Jan 13 12:54 /var/vpopmail/include/vpopmail.h
58
59 --
60 \ Georgi Georgiev \ It's not the valleys in life I dread so \
61 / chutz@×××.net / much as the dips. -- Garfield /
62 \ http://www.gg3.net/ \ \