smail 2.5 bug

[Greg Woods]

In article <2800011 at kailand> pwolfe at kailand.KAI.COM writes:
>
>When I upgraded from smail v2.3 to v2.5, I must have accidentally munged the
>permissions on the logfile (/usr/spool/uucp/mail.log).  Apparently, that file
>needs to be world writable for outgoing mail to be logged.  Everything works
>now.

I find it much more secure to make /bin/smail set-group-id-on-execution
to some unique group, and to make /usr/spool/uucp/mail.log writable by
the same group.

If you use the info in mail.log to audit mail on your system, you don't
want the audit file to be world-writable!
-- 
						Greg Woods.

UUCP: utgpu!woods, utgpu!{ontmoh, ontmoh!ixpierre}!woods, tmsoft!ixpierre!woods
VOICE: (416) 443-1734 [h]		LOCATION: Toronto, Ontario, Canada