PEAR is archived and read-only

This mirror preserves historical PEAR package releases and metadata so existing references remain available.

Home » Mail » Mail » Bug #1552

Doesn't check for permissions of `sendmail'; but checks for ownership instead.

Details

Submitted2004-06-03 15:04 UTC
Fromraphael at schwarzschmid dot de
StatusBogus
PackageMail
PHP VersionIrrelevant
OSLinux (irrelevant?)
Roadmaps(Not assigned)

Comments

[2004-06-03 15:04 UTC] raphael at schwarzschmid dot de

Description:
------------
Mail doesn't check sendmail's permissions but the ownership.
This can lead to problems in a shared environments especially.

("Sendmail is not executable")

Reproduce code:
---------------
It occured for me with the IMP program, which is part of Horde. (http://horde.org

[2004-06-04 11:44 UTC] raphael at schwarzschmid dot de

Hmm. Maybe I shouldn't have been that specific.

I was told two things I based my description on, neither of
which has to be valid, of course.

1. (my provider's support guy): It seems to check the owner-
ship instead of the permissions.

2. (from someone on IRC, in #horde): Btw, it's PEAR's Mail
that checks this, not IMP.

Based on these I stated that Mail wouldn't check for
permissions but for ownership on the sendmail binary.

Fact is, Horde's IMP didn't work with sendmail in /usr/sbin,
and owned by root.

Fact is, Horde's IMP worked when my provider's support guy
put the sendmail binary into my personal webspace and made
it owned by my user.

After I told these to the Horde guys they asked me to file
a bug with you. Beyond that, I'm clueless. If, however, you
want me to delve into some code or logfiles or whatever I'll
be happy to do so.

Thanks for making these cool libs available for free btw.

Regards, Raphael

[2004-06-15 07:02 UTC] raphael at schwarzschmid dot de

I've checked my hosting provider's set-up and they have PHP compiled with --enable-safe-mode indeed. Thanks for looking into this still, and sorry for bothering you at all :-)