Re: [cobalt-users] OT? Mail to a script/program

["Zeffie" <cobaltlist@xxxxxxxx>]

> > >> We have set this alias entry
> > >> (alias: "|/home/sites/site41/web/cgi-bin/alias.cgi")
> > >> to activate a script when receive email, but Sendmail answers
> > >> "Cannot mail directly to files"
> > >>If I try from a shell: perl/home/sites/site41/web/cgi-bin/alias.cgi
> > >>it works.!
> Zeffie wrote:
> >who owns the file and what group is it in....
> Its ownership is root.root
> >that doing a chmod +x on the script might end your problem
> Done, but not did the trick...
> >Then again, do you trust user 41 enough enough to all but hand them
> >root access to your server?
> But the cgi script is owned by root so I think user 41 can do nothing,
> or not?

Well I would have to dig for a while but these are my thoughts....
Sendmail may have an option or a security feature that will not run a cgi
with root power....   if it could then a user could write a cgi that does
bad things (wrong) and compromise the system...  Ok went digging a little
and noticed several files using user "mail" and group "sitex" or even admin
in some cases.... I have a feeling the cgi is asking to much... (Running a
root program)  I think what I would try next is chmod mail.group of the mail
user....

Zeffie