RE: [cobalt-users] EMERGENCY!!! /etc/smrsh gone!

[Grant Stern <grant@xxxxxxxxxxxxxx>]

>>> Can somebody please post a copy of the file /etc/smrsh from a
>>> Raq 2 to the
>>> list!  I accidentally overwrote it doing an app install :(
>>> 
>>> Does it have any specific stuff to my raq?  Or is it just a
>>> nice generic
>>> conf file?
>>> Thank you soooooooo much in advance,
>>> Grant
>> 
>> On my Raq2 the file is in /usr/sbin and is part of sendmail.
>> You should have at least one more copy of the file either in:
>> /usr/lib/sendmail-cf/feature/smrsh.m4
>> /usr/man/man8/smrsh.8
>> 
>> Just do a "locate smrsh"
>> also "man smrsh"
> 
> I emailed offlist the files he needed, hope that get's him back up and
> running.


Your email worked, and I got the smrsh dope.   I shouldn't have been messing
with it!  

For those who don't know, I'll share a little 3am research session with you:

shmsh -c expression  its a little binary to allow sendmail instead of
procmail to run emails through programs.  I got procmail on the job, but
without smrsh, box is vulnerable to all sorts of sendmail attacks, cuz its
job is to limit what sendmail runs, potentially as root.

BTW you guys might want to use the thing.  Its called Ticketsmith (
http://voxel.net/projects/ticketsmith/ ) .  Perl w/dbi php mysql required.

Thanks for the help Bob and the list.
Gs

PS just posted the initial on the site below, anyone who wants to write a
critical review will be put on my muchlove list.
-- 
RevengersHosting.com

More bang for the buck, a few programs for luck.