Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

Gentoo: Postfix Local privilege escalation

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Gentoo: Postfix Local privilege escalation
# 1  
Old 08-15-2008
Gentoo: Postfix Local privilege escalation
LinuxSecurity.com: Sebastian Krahmer of SuSE has found that Postfix allows to deliver mail to root-owned symlinks in an insecure manner under certain conditions. Normally, Postfix does not deliver mail to symlinks, except to root-owned symlinks, for compatibility with the systems using symlinks in /dev like Solaris. Furthermore, some systems like Linux allow to hardlink a symlink, while the POSIX.1-2001 standard requires that the symlink is followed.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT LINUX

postfix-add-policy

POSTFIX-ADD-POLICY(8)					      System Manager's Manual					     POSTFIX-ADD-POLICY(8)

NAME

       postfix-add-policy - add policy service to Postfix master.cf

SYNOPSIS

       postfix-add-policy [policy name...] [username...] [argv...]

DESCRIPTION

       The  postfix-add-policy(8)  command  adds  an  smtp  policy server named policy name running using username and called as argv to etc/post-
       fix/master.cf to facilitate integration of SMTP policy servers such as postgrey or postfix-policyd-spf-perl.  The configuration is based on
       the Postfix SMTPD_POLICY_README.  Adminstrators should verify it is appropriate for their requirements.

       The original file is copied prior to modification and left in /etc/postfix to make it possible to revert changes easily.

       Available in the Debian package for Postfix version 2.5.3 and later.

DIAGNOSTICS

       If the given policy name  already appears in the master.cf, a message will be printed to standard out and master.cf will not be modified.

ENVIRONMENT

       MAIL_CONFIG
	      Directory with Postfix configuration files.

	      The  postfix-add-policy(8)  command  should  use	this, but it currently doesn't.  It is hard coded to /etc/postfix.  This should be
	      changed.

CONFIGURATION PARAMETERS

       None

FILES

       /etc/postfix/master.cf

SEE ALSO

       postconf(5), Postfix configuration

LICENSE

       This software is licensed under the MIT open source license.

AUTHOR(S)
       Scott Kitterman
       <scott@kitterman.com>

															     POSTFIX-ADD-POLICY(8)