Subject: bin/21514: vacation allows unacceptably dangerous behavior
To: None <gnats-bugs@gnats.netbsd.org>
From: John Hawkinson <jhawk@mit.edu>
List: netbsd-bugs
Date: 05/09/2003 15:07:23
>Number: 21514
>Category: bin
>Synopsis: vacation allows unacceptably dangerous behavior
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Fri May 09 19:08:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator: John Hawkinson
>Release: -current of 19 April (et seq)
>Organization:
MIT
>Environment:
System: NetBSD lsc.mit.edu 1.6_STABLE NetBSD 1.6_STABLE (GENERICDEBUG) #1: Thu Jan 9 12:38:32 EST 2003 root@lsc.mit.edu:/u1/usr/src/sys/arch/i386/compile/GENERICDEBUG i386
Architecture: i386
Machine: i386
>Description:
In response to bin/5039, Christos added support to allow
vacation to reply to messages that arrive with only an Apparently-To:
header, or a Delivered-To: header. In response to concerns
from me, expressed on source-changes (circa 19 April), that support
was amended to do so via options, only.
I believe that support continues to be wrongheaded. vacation -t A
and vacation -t D will cause vacation to respond to mail it should
never respond to, violating standards.
My assessment is that the entire field of changes stemming from
bin/5039 should be backed out. They serve no legitimate purpose,
increase tool complexity, and have a significant chance of hurting
users.
>How-To-Repeat:
>Fix:
revert the changes in question.
>Release-Note:
>Audit-Trail:
>Unformatted: