[rt-users] New Issue

Jesse jesse at fsck.com
Sun Jul 1 17:05:45 EDT 2001


That will work. sort of.  It opens up the rather nasty security
hole that anything in group daemon has access to your RT database password.



On Mon, Jul 02, 2001 at 03:24:06PM -0400, Derek Buttineau wrote:
> Found a way to leave the config.pm file unreadable but still have it run...
> 
> I set the group on the config.pm and the rt-mailgate to be group daemon
> which is the group that sendmail runs as and it seems to work as intended.
> 
> Derek
> 
> ----- Original Message -----
> From: "Derek Buttineau" <derek at csolve.net>
> To: "Jesse" <jesse at fsck.com>; "Derek Buttineau" <derek.buttineau at csolve.net>
> Cc: <rt-users at lists.fsck.com>
> Sent: Monday, July 02, 2001 10:46 AM
> Subject: Re: [rt-users] New Issue
> 
> 
> > Well does indeed look like sendmail is removing the setgid...
> >
> > I set config.pm to be readable by other and it allowed the message to hit
> > the program.
> >
> > Derek
> >
> > ----- Original Message -----
> > From: "Jesse" <jesse at fsck.com>
> > To: "Derek Buttineau" <derek.buttineau at csolve.net>
> > Cc: <rt-users at lists.fsck.com>
> > Sent: Friday, June 29, 2001 6:03 PM
> > Subject: Re: [rt-users] New Issue
> >
> >
> > > Taht looks like rt-mailgate has lost it's setgid bit. or perhaps
> sendmail
> > clobbers it.
> > >
> > >
> > >
> > >
> > > On Fri, Jun 29, 2001 at 05:45:34PM -0400, Derek Buttineau wrote:
> > > > I've resolved the web page error that I was previously experiencing by
> > using the Apache::Cookie vs CGI::Cookie as described in a previous
> message..
> > > >
> > > > I however am now having an issue with the mailer gateway... using
> > sendmail 8.11.3 (standard on freebsd 4.3), it doesn't seem to find the
> > config.pm and ends up with this message:
> > > >
> > > >
> > > >
> > > >    ----- The following addresses had permanent fatal errors -----
> > > > "|/home/rt2/bin/rt-mailgate --queue support --action correspond"
> > > >     (reason: 2)
> > > >     (expanded from: rt)
> > > >
> > > >    ----- Transcript of session follows -----
> > > > Can't locate config.pm in @INC (@INC contains: /home/rt2/etc
> > /home/rt2/lib /usr/local/lib/perl5/5.6.1/i386-freebsd
> > /usr/local/lib/perl5/5.6.1
> /usr/local/lib/perl5/site_perl/5.6.1/i386-freebsd
> > /usr/local/lib/perl5/site_perl/5.6.1
> > /usr/local/lib/perl5/site_perl/5.005/i386-freebsd
> > /usr/local/lib/perl5/site_perl/5.005 /usr/local/lib/perl5/site_perl .) at
> > /home/rt2/lib/RT/Interface/Email.pm line 81.
> > > > BEGIN failed--compilation aborted at
> /home/rt2/lib/RT/Interface/Email.pm
> > line 81.
> > > > Compilation failed in require at /home/rt2/bin/rt-mailgate line 18.
> > > > BEGIN failed--compilation aborted at /home/rt2/bin/rt-mailgate line
> 18.
> > > > 554 5.3.0 "|/home/rt2/bin/rt-mailgate --queue support --action
> > correspond"... unknown mailer error 2
> > > >
> > > >
> > > > Any notions?
> > > >
> > > > Thanks,
> > > >
> > > > Regards,
> > > >
> > > > Derek Buttineau
> > > > Internet Systems Administrator
> > > > Compu-SOLVE Internet Services
> > > >
> > >
> > > --
> > > jesse reed vincent -- root at eruditorum.org -- jesse at fsck.com
> > > 70EBAC90: 2A07 FC22 7DB4 42C1 9D71 0108 41A3 3FB3 70EB AC90
> > >
> > > T\'waS br|ll1G 4|\||> 7#e sl1T#Y T0v3s D1|> gYR3 4nd Gimb at 1 1|\| 7#E
> > \/\/A83
> > > all |\/|1|\/|53Y W3R3 d4 60r0GR0V3s @|\||> |>4 M0MES wr47H oUTGR4b3.
> > >
> >
> 
> 
> _______________________________________________
> rt-users mailing list
> rt-users at lists.fsck.com
> http://lists.fsck.com/mailman/listinfo/rt-users
> 

-- 
jesse reed vincent -- root at eruditorum.org -- jesse at fsck.com 
70EBAC90: 2A07 FC22 7DB4 42C1 9D71 0108 41A3 3FB3 70EB AC90

I think co-ordinating 1000 prima donnas living all over the world will be as 
easy as herding cats..." -- Andy Tanenbaum on the linux development model, 1992




More information about the rt-users mailing list