home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!think.com!barmar
- From: barmar@think.com (Barry Margolin)
- Newsgroups: comp.unix.questions
- Subject: Re: Funny mail !
- Date: 7 Jan 1993 21:09:47 GMT
- Organization: Thinking Machines Corporation, Cambridge MA, USA
- Lines: 18
- Message-ID: <1ii66rINNp3j@early-bird.think.com>
- References: <1idklpINNl27@msuinfo.cl.msu.edu> <1993Jan7.092343.20412@newsserver.rrzn.uni-hannover.de>
- NNTP-Posting-Host: telecaster.think.com
-
- In article <1993Jan7.092343.20412@newsserver.rrzn.uni-hannover.de> zzsb@kursix.rrzn.uni-hannover.de (Wolfgang Sander-Beuermann) writes:
- >>I went to /usr/spool/mail and created a file with one of my
- >>friends names (user-id).
-
- >I would call this an administration fault of your machine: the spool
- >directory of mail shouldn't be world writable; you should report it
- >to your system manager.
-
- Some mail systems require a world-writable mail spool directory, so that
- mail readers (such as GNU Emacs RMAIL) can rename and/or delete mail spool
- files. The sticky bit is used to prevent someone from deleting another
- user's file, but this doesn't prevent them from creating a file with
- another user's name.
- --
- Barry Margolin
- System Manager, Thinking Machines Corp.
-
- barmar@think.com {uunet,harvard}!think!barmar
-