Did it work after you left a new voice mail message? I was looking into the source code to fix it so that the euid was set to nobody, create the file and then change it back to uid 0, but that didn't work. Or, maybe change the file mode was 770 with the group set so that the webserver could modify the file so I wouldn't have to run a suid .cgi script.
Patrick On Wed, 30 Jul 2003, Todd Lieberman wrote: > I fixed my own problem. I had just did chmod 755 vmail.cgi and it worked. > > you still need to make sure nobody has read/write permission on > /var/spool/asterisk/vm/$MBOX > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Todd > Lieberman > Sent: Wednesday, July 30, 2003 3:50 PM > To: [EMAIL PROTECTED] > Subject: RE: [Asterisk-Users] voicemail file access problems > > > I did the chown and now I get > > [Wed Jul 30 15:51:11 2003] [error] [client 216.183.124.45] Setuid/gid script > is writable by world., referer: > http://asterisk.weichertrents.com/cgi-bin/vmail.cgi > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Paulo > Mannheimer > Sent: Wednesday, July 30, 2003 3:23 PM > To: [EMAIL PROTECTED] > Subject: RE: [Asterisk-Users] voicemail file access problems > > > Thanks! > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Tilghman > Lesher > Sent: July 30, 2003 4:06 PM > To: [EMAIL PROTECTED] > Subject: Re: [Asterisk-Users] voicemail file access problems > > On Wednesday 30 July 2003 01:41 pm, Paulo Mannheimer wrote: > > Hi folks, > > > > I'm having problems accessing my voicemail files through the web > > interface. > > > > I remember that this was discussed on the list, and it seems to be > > a permission problem, but I couldn't find any answer by searching > > the archives. > > > > Any hint? > > chown root vmail.cgi > chmod u+s vmail.cgi > > -Tilghman > > _______________________________________________ > Asterisk-Users mailing list > [EMAIL PROTECTED] > http://lists.digium.com/mailman/listinfo/asterisk-users > > _______________________________________________ > Asterisk-Users mailing list > [EMAIL PROTECTED] > http://lists.digium.com/mailman/listinfo/asterisk-users > > _______________________________________________ > Asterisk-Users mailing list > [EMAIL PROTECTED] > http://lists.digium.com/mailman/listinfo/asterisk-users > > _______________________________________________ > Asterisk-Users mailing list > [EMAIL PROTECTED] > http://lists.digium.com/mailman/listinfo/asterisk-users > _______________________________________________ Asterisk-Users mailing list [EMAIL PROTECTED] http://lists.digium.com/mailman/listinfo/asterisk-users
