Re: Procmail feature security hole?

[Frank T. <ft...@ui...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Billy Donahue, at 04:10 -0400 on Tue, 3 Oct 2000, wrote:

> Eek.. if it happens in procmail, that may get noisy on an unattended
> terminal.  Even if I'm just busy I may not want to see the messages.
> (I usually stay logged in while I'm asleep in the next room)..  I like
> the idea of 'out of band' data, though.  Maybe the procmail verifier
> can slip some pattern like:

$DISPLAY is not set for procmail-running programs, so I couldn't write to
the X screen.

> 	You may be looking at a forged message.  I don't remember
> 	verifying it, yet it carries pgpenvelope borders.
> 	<press any key>

This system is interesting, but I like String::Approx more.

- -- 
Frank Tobin		http://www.uiuc.edu/~ftobin/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (FreeBSD)
Comment: pgpenvelope 2.9.0 - http://pgpenvelope.sourceforge.net/

iEYEARECAAYFAjnaKvIACgkQVv/RCiYMT6NmWACgiltpSrbLvBt9dO35NRvnm2Wa
tJUAn0Ivqu8M2eSTdF+ixcQrR8aotWFN
=ZIDj
-----END PGP SIGNATURE-----