From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.2) Gecko/20010725 Description of problem: sendmail-8.10.0-aliasesDoS.patch should NOT be included attaching emails from claus How reproducible: Always Steps to Reproduce: 1. rpm --rebuild sendmail-8... 2. 3. Additional info:
This was originally from a sendmail 8.12.0 Beta build, but applies to current rpm From Claus (@sendmail Inc.) <snip> > > [chrismcc@www1 sendmail-8.12.0.Beta7]$ head -n 1030 sendmail/main.c | > tail -n 7 > > if (LogLevel > 1) > sm_syslog(LOG_ALERT, NOQID, > "user %d attempted to rebuild the alias map", > RealUid); > usrerr("Permission denied"); > finis(FALSE, EX_USAGE); > } Where did you get that version? Did you patch it? That's NOT in the version we distribute (I just verified it twice). Please download Beta7 from sendmail.org and verify the PGP signature. ----- On Thu, May 24, 2001, Christopher McCrory wrote: > > Where did you get that version? Did you patch it? That's NOT in > > the version we distribute (I just verified it twice). Please > > download Beta7 from sendmail.org and verify the PGP signature. > > > You're right. Sorry. It was from a aliases DOS attack patch for older > sendmail versions that I accidently left in place. That code is in sendmail since 8.10. ------ END ----- I can send/attach more emails if you would like.
Thanks a lot for this bug-report, fixed in next release, Florian La Roche