From ust@cert.siemens.de  Thu Dec  9 07:36:11 1999
Return-Path: <ust@cert.siemens.de>
Received: from thoth.mch.sni.de (thoth.mch.sni.de [192.35.17.2])
	by hub.freebsd.org (Postfix) with ESMTP id BE5FF15694
	for <FreeBSD-gnats-submit@freebsd.org>; Thu,  9 Dec 1999 07:33:35 -0800 (PST)
	(envelope-from ust@cert.siemens.de)
Received: from mail1.siemens.de (mail1.siemens.de [139.23.33.14])
	by thoth.mch.sni.de (8.9.3/8.9.3) with ESMTP id QAA21129
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 9 Dec 1999 16:33:25 +0100 (MET)
Received: from mars.cert.siemens.de (ust.mchp.siemens.de [139.23.201.17])
	by mail1.siemens.de (8.9.3/8.9.3) with ESMTP id QAA24119
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 9 Dec 1999 16:33:25 +0100 (MET)
Received: from alaska.cert.siemens.de (alaska.cert.siemens.de [139.23.202.134])
	by mars.cert.siemens.de (8.9.3/8.9.3/Siemens CERT [ $Revision: 1.9 ]) with ESMTP id QAA06215
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 9 Dec 1999 16:33:24 +0100 (CET)
Received: (from ust@localhost)
	by alaska.cert.siemens.de (8.9.3/8.9.3/alaska [ $Revision: 1.2 ]) id PAA92944;
	Thu, 9 Dec 1999 15:33:24 GMT
	(envelope-from ust)
Message-Id: <199912091533.PAA92944@alaska.cert.siemens.de>
Date: Thu, 9 Dec 1999 15:33:24 GMT
From: Udo Schweigert <ust@cert.siemens.de>
Reply-To: ust@cert.siemens.de
To: FreeBSD-gnats-submit@freebsd.org
Subject: patch for sendmail 8.9.3 to avoid alias database deletion
X-Send-Pr-Version: 3.2

>Number:         15373
>Category:       misc
>Synopsis:       patch for sendmail 8.9.3 to avoid alias database deletion
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec  9 07:40:00 PST 1999
>Closed-Date:    Thu Dec 9 07:46:28 PST 1999
>Last-Modified:  Thu Dec  9 07:47:00 PST 1999
>Originator:     Udo Schweigert
>Release:        FreeBSD 3.4-RC i386
>Organization:
>Environment:

FreeBSD -STABLE and -CURRENT

>Description:

There is a bug in sendmail 8.x.x which allows a local user to destroy the
alias database by doing sendmail -bi and immediately sending an signal to
it.

>How-To-Repeat:


>Fix:
	
The attached patch (taken from Debian GNU Linux) fixes the problems (in use
on our Mail-Server without problems for 2 days).

With this patch non-root users (exactly spoken: non-trusted users) 
are not able to rebuild the database (which is to me not a problem).

--- contrib/sendmail/src/main.c.orig Sun Jan 10 00:31:13 1999
+++ contrib/sendmail/src/main.c Wed Dec  8 12:51:35 1999
@@ -984,6 +984,18 @@
 		usrerr("Permission denied");
 		finis(FALSE, EX_USAGE);
 	}
+	if (OpMode == MD_INITALIAS &&
+			RealUid != 0 &&
+			RealUid != TrustedUid &&
+			!wordinclass(RealUserName, 't'))
+	{
+		if (LogLevel > 1)
+			sm_syslog(LOG_ALERT, NOQID,
+					"user %d attempted to rebuild the alias map",
+					RealUid);
+		usrerr("Permission denied");
+		finis(FALSE, EX_USAGE);
+	}
 
 	if (MeToo)
 		BlankEnvelope.e_flags |= EF_METOO;

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: sheldonh 
State-Changed-When: Thu Dec 9 07:46:28 PST 1999 
State-Changed-Why:  
Already fixed as per PR 15088. 
>Unformatted:
