Sam --

Since some time shortly before 0.95.4, and well after 0.88, all of the
suid-dependent code was stripped from mutt and put into a little
executable called "mutt_dotlock"; it's a lot easier for folks to debug
or inspect this little chunk of code, which exists purely to lock and
unlock mailboxes in a dot-locked root/mail spool directly, than it
would be to make sure that mutt is safe.  Meanwhile, mutt can now be
installed with ordinary permissions and no suid requirement, so even a
user can, assuming that mutt_dotlock was installed once, build and try
out the latest version of mutt or the newest patch.

You should find /usr/local/bin/mutt_dotlock with mode 02755 and owner
root.mail and /usr/local/bin/mutt with mode 0755 and owner root.<whatever>
just like any of your other favorite programs (where <whatever> is
probably bin, root, or staff, I bet).


HTH & HAND

:-D
-- 
David Thorburn-Gundlach         * It's easier to fight for one's principles
(play) [EMAIL PROTECTED]      * than to live up to them. -- fortune cookie
(work) [EMAIL PROTECTED]         Helping out at Pfizer
http://www.bigfoot.com/~davidtg/        Shpx gur Pbzzhavpngvbaf Qrprapl Npg!
"Why2k?  Well, I didn't think at the time that I could charge any more!"
Note: If bigfoot.com gives you fits, try sector13.org in its place. *sigh*

PGP signature

Reply via email to