From: Steve M. Robbins (steve@Nyongwa.CAM.ORG)
Date: 10/16/92


From: steve@Nyongwa.CAM.ORG (Steve M. Robbins)
Subject: Re: Any mail or fakemail available for linux ?
Date: 16 Oct 1992 23:28:25 GMT

In article <1992Oct15.221410.23613@unislc.uucp> erc@unislc.uucp (Ed Carp) writes:
>Steve M. Robbins (steve@Nyongwa.CAM.ORG) wrote:
>
>: As I recall, the important things were:
>: - elm is a regular program NOT setgid
>: - /usr/spool/mail has permissions 1777 (global read/write with the sticky bit)
>: - the mailboxes in /usr/spool/mail have permissions 600 (rw for owner only)
>
>Excuse me? Isn't this a security hole to have a directory world writeable?

Is it? How?

>I thought the sticky bit was just for deletion of files.

Yes.

>Ed Carp, N7EKG erc@apple.com 801/538-0177

-- 
Steve Robbins  --  steve@nyongwa.cam.org
One cannot simultaneously prepare for War and for Peace.