Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the mailer since we never

want to run the mailer setuid.

diff --git a/logging.c b/logging.c
index 03364fa09bdf83ee8472e17569ef076d5c68c706..e0456379b1f44070b7b5608b77a194f9e51fbd1f 100644 (file)
--- a/logging.c
+++ b/logging.c
@@ -494,7 +494,7 @@ send_mail(line)
                endpwent();
 
                /* Run mailer as root so user cannot kill it. */
-               set_perms(PERM_ROOT, 0);
+               set_perms(PERM_FULL_ROOT, 0);
                execv(mpath, argv);
                _exit(127);
            }