Steffen Kaiser wrote:
smrsh applies to programs sendmail calls,
but not to the spawned ones (e.g. procmail).
At least not in my installation.

What was the user's shell?

As an example, I have an email-only account with smrsh as its shell. If I try to log in with that user (locally, via SSH from an allowed host, or even using "su <username>") I get kicked out immediately with the message,
Usage: smrsh -c command


On the other hand, if I run
  su <username> -c 'vacation -i'
it will run the vacation program (which is allowed) and exit.

Then if I try something like
  su <username> -c "cat /etc/passwd"
I get kicked out with:
  smrsh: "cat" not available for sendmail programs (stat failed)

Note that smrsh *is* willing to call interpreters, as long as the script itself is symlinked.

--
Kelson Vibber
SpeedGate Communications <www.speed.net>

_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to