Sisyphus repository
Last update: 1 october 2023 | SRPMs: 18631 | Visits: 37866280
en ru br
ALT Linux repos
S:8.18.0-alt0.Alpha2
5.0: 8.14.3-alt3
4.1: 8.14.4-alt0.M41.1
4.0: 8.14.4-alt0.M40.1
3.0: 8.13.4-alt3
+updates:8.13.8-alt1.M30.1

Group :: System/Servers
RPM: sendmail

 Main   Changelog   Spec   Patches   Sources   Download   Gear   Bugs and FR  Repocop 

Patch: sendmail-8.12.2-aliasesDoS.patch
Download


diff -Nur sendmail-8.12.2.orig/sendmail/main.c sendmail-8.12.2/sendmail/main.c
--- sendmail-8.12.2.orig/sendmail/main.c	Thu Jan 17 12:55:04 2002
+++ sendmail-8.12.2/sendmail/main.c	Thu Jan 17 12:59:22 2002
@@ -1196,6 +1196,18 @@
 		macdefine(&BlankEnvelope.e_macro, A_PERM,
 			  macid("{daemon_flags}"), "c u");
 	}
+	if (OpMode == MD_INITALIAS &&
+	    RealUid != 0 &&
+	    RealUid != TrustedUid &&
+	    !wordinclass(RealUserName, 't'))
+	{
+		if (LogLevel > 1)
+			sm_syslog(LOG_ALERT, NOQID,
+				  "user %d attempted to rebuild the alias map",
+				  RealUid);
+ 		usrerr("Permission denied");
+ 		finis(false, true, EX_USAGE);
+ 	}
 
 	/*
 	**  Do basic initialization.
 
design & coding: Vladimir Lettiev aka crux © 2004-2005, Andrew Avramenko aka liks © 2007-2008
current maintainer: Michael Shigorin