Jordan Russell:
> Whenever cron (cronie-1.4.5-2.fc13.i686 on Fedora 13) sends mail to a
> non-root local user, e.g.:
>
> 12 * * * * someuser echo test
In which file is this? /etc/crontab does not document the use of
username fields in my Fedora 13 test box, nor would I expect to
see username fields in per-user crontab files.
> postfix (2.5.9, built from stock source) logs:
>
> > warning: the Postfix sendmail command has set-uid root file permissions
> > warning: or the command is run from a set-uid root process
> > warning: the Postfix sendmail command must be installed without
> set-uid root file permissions
>
> Yet sendmail isn't set-uid, nor is crond:
>
> # ls -l /usr/sbin/sendmail /usr/sbin/crond
> -rwxr-xr-x 1 root root 56880 Aug 13 08:53 /usr/sbin/crond
> -rwxr-xr-x 1 root root 572903 Mar 4 23:15 /usr/sbin/sendmail
>
> Would this be a crond bug?
Something (cron, /bin/mail, whatever...) executes the Postfix
sendmail command with effective UID zero (root) and with real UID
non-zero. I find that sloppy.
At least it executes the user command with the right real and
effective UID.
Wietse
