Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add option to ./configure which prevents installation of sympa_newaliases-wrapper #1031

Closed
racke opened this issue Nov 10, 2020 · 0 comments · Fixed by #1032
Closed

Add option to ./configure which prevents installation of sympa_newaliases-wrapper #1031

racke opened this issue Nov 10, 2020 · 0 comments · Fixed by #1032
Labels
security
Milestone
6.2.60

Comments

@racke
Copy link
Contributor

racke commented Nov 10, 2020

The setuid wrapper is not needed for Exim or Postfix with the new aliases_wrapper configuration option from #1015. I suppose it isn't necessary for Sendmail as well.

In my opinion there is no point to produce a binary which poses a security risk in this case. If you agree with me, I'm going to produce a corresponding pull request.

Recommended configuration for Exim:

aliases_program: none

Recommended configuration for Postfix (single domain):

aliases_program: postalias
aliases_wrapper: off

Recommended configuration for Postfix (multiple domains):

aliases_program: postmap
aliases_wrapper: off
@racke racke added the security label Nov 10, 2020
@ikedas ikedas mentioned this issue Nov 12, 2020
Merged
@ikedas ikedas added this to the 6.2.60 milestone Nov 17, 2020
ikedas added a commit that referenced this issue Nov 24, 2020
@ikedas
Merge pull request #1032 from ikedas/issue-1031 by ikedas
f268518 
Add option to ./configure which prevents installation of sympa_newaliases-wrapper (#1031)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security
Projects
None yet
Milestone
6.2.60
2 participants
@racke @ikedas