On Thu, 3 Jul 2003, Martynas Buozis wrote:
> [EMAIL PROTECTED] ~} /data/compile/imap-2002d/imapd/imapd
> * PREAUTH [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY
> UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND]
> Pre-authenticated user martynas dev IMAP4rev1 2003.338 at Thu, 3 Jul
> 2003 10:03:55 +0200 (MEST)
> x list "" %
> * LIST (\NoInferiors) NIL INBOX
> x OK LIST completed

Are there files and/or directories in *both* the home directory and the
/data/mail directory?

Are you certain that your userid has access to the /data/mail directory?

Your sample shows it returning *nothing*, as if it is looking at a
non-existant directory (INBOX always exist).

> mymailboxdir procedure is exactly same as you used in your earlier letter.

I just typed that in off the top of my head.  I didn't try to test or
debug it.  You need to do that.  Run gdb on imapd, and see what name
mymailboxdir() actually builds and what kind of strings mailboxfile() puts
together for path names.

> > You almost certainly do not want to use closedBox either.  closedBox does
> > not have anything to do with using an alternative directory, and there are
> > specific security issues with using chroot() that only an expert should
> > undertake.
> Well, actually closed box is what I would like to use. There must be
> some recomendations how to use it if feature is available ?

Start with reading many books about UNIX security and the risks of using
chroot().  Do Google searchs about "chroot jail".  While in Google, look
for historical reports of how FTP servers (and other servers) that use
chroot() have been cracked, and why many people consider chroot() to be
intrinsically dangerous.  [Hint: What is the meaning of a subdirectory
called "etc" of a chroot() directory?]

When you thoroughly understand all of this, then you may consider closed
box.  But even then I think that it's a bad idea.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

Reply via email to