Package: exim
Version: 3.36-13
Severity: important

Hi,

this problem MAY be a voluntary decision of the exim coders, I don't
know, but anyway it's disturbing :

if you define an alias in /etc/aliases like for example

        myalias: "|/usr/bin/somecommand"

then run newaliases, every time you send an email to 'myalias', the
email message you sent is piped into /usr/bin/somecommand

somecommand is run as the user defined in the 'system_aliases'
directive in exim.conf

but only the primary group for this user is initialized, not the
additionnal groups this user is a member of.

maybe a setgroups() function call is missing somewhere in the code,
or something like that.

you can verify this easily, just define such an alias :

        myalias: "|/usr/bin/id -Gn"

the error message you'll receive (normal) will anyway list only
the primary group of the user the command is run as, instead of all
the gorups this user is a member of, as can be seen by
launching the same command from the shell (as the very same user)

hoping this helps

bye

Jerome Alet

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-2-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) (ignored: 
LC_ALL set to [EMAIL PROTECTED])

Versions of packages exim depends on:
ii  cron                        3.0pl1-87    management of regular background p
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libdb3                      3.2.9-22     Berkeley v3 Database Libraries [ru
ii  libident                    0.22-2.2     simple RFC1413 client library - ru
ii  libldap2                    2.1.30-3     OpenLDAP libraries
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libpcre3                    5.0-1        Perl 5 Compatible Regular Expressi

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to