55766 – Mail settings in default wasabi.conf

Bug 55766 - Mail settings in default wasabi.conf

Summary: Mail settings in default wasabi.conf

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Hosted Projects
Classification:	Unclassified
Component:	Tenshi (show other bugs)
Hardware:	All All

Importance:	High normal (vote)
Assignee:	Tenshi Group User

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2004-07-01 02:01 UTC by Marko Vallius
Modified:	2004-07-01 02:59 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marko Vallius 2004-07-01 02:01:43 UTC

By default all wasabi reports are sent to sysadmin@mydomain.net (/etc/wasabi/wasabi.conf). This is a bad idea as domain 'mydomain.net' exists:

Registrant:
   NamesDirect.com NamesDirect.com
   P.O. Box 821067
   Vancouver WA 98682-0024
   Vancouver, WA 98682-0024
   US

   Registrar: NAMESDIRECT
   Domain Name: MYDOMAIN.NET
      Created on: 08-OCT-00
      Expires on: 16-APR-05
      Last Updated on: 11-JUN-04

I'd suggest using either a definitely non-existent address (e.g. 'sysadmin@my.domain.invalid') or a local address ('sysadmin@localhost', 'root@localhost') to prevent leaking of security-related reports.

Comment 1 Andrea Barisani (RETIRED) gentoo-dev

2004-07-01 02:59:29 UTC

I've fixed this in our repository. Next release will have 'localhost'.  Thanks for the report.