Jonathan McDowell <[EMAIL PROTECTED]> wrote:
>
>On Fri, May 05, 2000 at 05:20:25PM -0700, Chris Hanlon wrote:
>> Is there anyway to restrict which users/groups can execute commands
>> via the | option in there .qmail file? I realise that the problem
>> could be solved by not giving users access to the .qmail file but this
>> is not always an option.
>
>I changed qmail to use a modified smrsh from sendmail instead of /bin/sh
>- this allows you to say that users can only execute programs that
>you've enabled. It works on a system wide level rather than a user/group
>level though.
All you need to do, then, is make smrsh executable only by a certain
group, and put the users you want to have that ability in the group.
-Dave
