#
304587 |
|
22-Aug-2016 |
bapt |
Import Dragonfly Mail Agent snapshort from 20160806 aka v0.11+
Most important change being: dma - Fix security hole
Affecting DragonFly 4.6 and earlier, Matt Dillon fixed this in base after finding out from BSDNow Episode 152. Comments following were from his commit which explains better than I. Just taking his change and putting it here as well.
* dma makes an age-old mistake of not properly checking whether a file owned by a user is a symlink or not, a bug which the original mail.local also had.
* Add O_NOFOLLOW to disallow symlinks. Thanks-to: BSDNow Episode 152, made me dive dma to check when they talked about the mail.local bug.
|
#
262282 |
|
21-Feb-2014 |
bapt |
Import Dragonfly Mail Agent into base system
It is a small and lightweight Mail Transport Agent. It accepts mails from locally installed Mail User Agents (MUA) and delivers the mails either locally or to a remote destination. Remote delivery includes several features like TLS/SSL support, SMTP authentication and NULLCLIENT.
Make dma conditional to new WITHOUT_DMA option and make it respect WITHOUT_MAIL
Reviewed by: peter Discussed with: emaste, bz, peter
|