summaryrefslogtreecommitdiff
path: root/mail
diff options
context:
space:
mode:
authorKris Kennaway <kris@FreeBSD.org>2000-06-04 23:21:30 +0000
committerKris Kennaway <kris@FreeBSD.org>2000-06-04 23:21:30 +0000
commit84d08be5154b3ab1f676acd17a98220360cc1ff0 (patch)
treeef1060e62c37ca4d31ad2712145b98b06571836d /mail
parentAdd messarge, a set of tools to manipulate UNIX mailboxes. (diff)
Note documented insecurity of majordomo on multi-user machines.
Pointed out by: bugtraq
Notes
Notes: svn path=/head/; revision=29190
Diffstat (limited to 'mail')
-rw-r--r--mail/majordomo/Makefile5
1 files changed, 5 insertions, 0 deletions
diff --git a/mail/majordomo/Makefile b/mail/majordomo/Makefile
index 8693243439a5..285f095a9c1b 100644
--- a/mail/majordomo/Makefile
+++ b/mail/majordomo/Makefile
@@ -24,6 +24,11 @@ INSTALL_TARGET= install install-wrapper
MAN1= approve.1 bounce-remind.1 digest.1
MAN8= majordomo.8
+pre-fetch:
+.if !defined(BATCH) && !defined(PACKAGE_BUILDING)
+ /usr/bin/dialog --yesno "Majordomo is unsafe to use on multi-user machines: local users can run arbitrary commands as the majordomo user. Do you wish to accept the security risk and build majordomo anyway?" 8 60 || ${FALSE}
+.endif
+
pre-configure:
@ ${SETENV} ${MAKE_ENV} /usr/bin/perl ${SCRIPTDIR}/createuser
@ ${CP} ${FILESDIR}/aliases.majordomo ${WRKSRC}