Dag-Erling Smørgrav 6ca3734e92 comsat: Don't read arbitrary files ...

When processing a notification, instead of accepting any file name
that doesn't begin with a slash, accept only file names that don't
contain any slashes at all.  This makes it possible to notify a
user about a mailbox that doesn't bear their name, as long as they
are permitted to read it, but prevents comsat from reading files
outside the mail spool.

PR:		270404
MFC after:	1 week
Reviewed by:	emaste
Differential Revision:	https://reviews.freebsd.org/D51580

(cherry picked from commit 4a4338d944)

comsat: Don't return from the child

Fixes:		91629228e3
MFC after:	1 week
Reviewed by:	emaste
Differential Revision:	https://reviews.freebsd.org/D51581

(cherry picked from commit e40a2c4927)

2025-08-05 11:52:28 +00:00

..

comsat.8

…

comsat.c

comsat: Don't read arbitrary files

2025-08-05 11:52:28 +00:00

Makefile

…

Makefile.depend

…