On Wed, Dec 10, 2003 at 01:42:23PM -0500, Yermo M. Lamers wrote: > > Note that the Eicar.com file is rw root only. Running as a child of a > setuid process running as qscand clamscan would not be allowed to access > this file. >
I bet you're running that BROKEN install of maildrop that installs reformime setuid root! PLEASE, get rid of it and get a real copy of maildrop from the source! Someone has done a very bad thing there!!! [or you could just "chmod 0755 /usr/bin/reformime" ] -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
