Michelle Konzack writes:

Am 2008-08-15 18:15:11, schrieb Sam Varshavchik:
Botched install. Some script, binary, or config file, has wrong permissions. Usually 'make install' should clean it up.

I have a  Debian  installation,  but  however,  some  of  the  files  in
/etc/courier have "root:adm" and then another "daemon:adm". I am my self
in the GROUP "adm" and can change setings on the fly...

The full list is:

----[ command 'ls -l /etc/courier/*' ]----------------------------------
-rw-rw---- 1 root   adm 17231 2008-08-14 22:48 /etc/courier/aliases.dat
-rw-rw---- 1 daemon adm  3654 2006-09-09 21:54 /etc/courier/authdaemonrc
-rw-rw---- 1 root   adm    11 2008-08-02 21:28 /etc/courier/authmodulelist
-rw-rw---- 1 root   adm 10507 2008-08-14 15:24 /etc/courier/courierd
-rw-rw---- 1 root   adm    16 2008-08-14 17:40 /etc/courier/defaultdomain
-rw-rw---- 1 root   adm   802 2007-02-13 10:51 /etc/courier/dsndelayed.txt
-rw-rw---- 1 root   adm   214 2007-02-13 10:51 /etc/courier/dsndelivered.txt
-rw-rw---- 1 root   adm   187 2007-02-13 10:51 /etc/courier/dsnfailed.txt
-rw-rw---- 1 root   adm   335 2007-02-13 10:51 /etc/courier/dsnfooter.txt
-rw-rw---- 1 root   adm    43 2008-08-03 20:59 /etc/courier/dsnfrom
-rw-rw---- 1 root   adm   191 2007-02-13 10:51 /etc/courier/dsnheader.txt
-rw-rw---- 1 root   adm     6 2008-07-19 22:11 /etc/courier/dsnlimit
-rw-rw---- 1 root   adm   530 2007-02-13 10:51 /etc/courier/dsnrelayed.txt
-rw-rw---- 1 root   adm    30 2007-02-13 10:51 /etc/courier/dsnsubjectnotice.txt
-rw-rw---- 1 root   adm    23 2007-02-13 10:51 /etc/courier/dsnsubjectwarn.txt
-rw-rw---- 1 root   adm    33 2008-08-14 19:15 /etc/courier/esmtpacceptmailfor
-rw-rw---- 1 daemon adm   107 2008-07-19 22:25 /etc/courier/esmtpauthclient
-rw-rw---- 1 root   adm  8682 2008-08-14 22:07 /etc/courier/esmtpd
-rw-rw---- 1 root   adm   405 2008-08-03 21:51 /etc/courier/esmtpd.cnf
-rw-rw---- 1 root   adm   342 2007-02-13 10:51 /etc/courier/esmtpd.cnf.dpkg-dist
-rw-rw---- 1 root   adm     4 2008-08-14 22:30 /etc/courier/esmtpdelay
-rw-rw---- 1 root   adm  3484 2008-08-14 22:07 /etc/courier/esmtpd-msa
-rw-rw---- 1 daemon adm  2219 2008-08-03 22:02 /etc/courier/esmtpd.pem
-rw-rw---- 1 root   adm  5954 2008-08-03 20:57 /etc/courier/esmtpd-ssl
-rw-rw---- 1 root   adm    39 2008-07-19 22:19 /etc/courier/esmtpgreeting
-rw-rw---- 1 root   adm    46 2008-08-14 19:26 /etc/courier/esmtproutes
-rw-rw---- 1 root   adm     4 2008-07-19 22:26 /etc/courier/esmtptimeout
-rw-rw---- 1 root   adm     3 2008-07-19 22:26 /etc/courier/esmtptimeoutconnect
-rw-rw---- 1 root   adm     4 2008-07-19 22:27 /etc/courier/esmtptimeoutdata
-rw-rw---- 1 root   adm     4 2008-07-19 22:28 /etc/courier/esmtptimeouthelo
-rw-rw---- 1 root   adm     3 2008-07-19 22:29 /etc/courier/esmtptimeoutquit
-rw-rw---- 1 root   adm   965 2007-02-13 10:51 /etc/courier/faxcoverpage.tr
-rw-rw---- 1 root   adm  1440 2008-08-14 19:31 /etc/courier/faxnotifyrc
-rw-rw---- 1 root   adm     6 2008-08-14 22:37 /etc/courier/faxqueuetime
-rw-r----- 1 daemon adm 10709 2007-02-13 10:51 /etc/courier/faxrc
-rw-rw---- 1 root   adm 12288 2008-08-14 19:34 /etc/courier/hosteddomains.dat
-rw-rw---- 1 root   adm 13534 2008-08-14 16:11 /etc/courier/imapd
-rw-rw---- 1 daemon adm   404 2008-08-03 21:26 /etc/courier/imapd.cnf
-rw-rw---- 1 daemon adm   336 2007-02-13 10:51 /etc/courier/imapd.cnf.dpkg-dist
-rw-rw---- 1 daemon adm  2223 2008-08-03 22:05 /etc/courier/imapd.pem
-rw-rw---- 1 root   adm  6236 2008-08-03 20:56 /etc/courier/imapd-ssl
-rw-rw---- 1 root   adm    43 2008-08-14 17:40 /etc/courier/locals
-rw-rw---- 1 root   adm    29 2008-07-19 23:00 /etc/courier/me
-rw-rw---- 1 root   adm    49 2007-02-13 10:51 /etc/courier/module.dsn
-rw-rw---- 1 root   adm    76 2007-02-13 10:51 /etc/courier/module.esmtp
-rw-rw---- 1 root   adm    69 2007-02-13 10:51 /etc/courier/module.fax
-rw-rw---- 1 root   adm    64 2007-02-13 10:51 /etc/courier/module.local
-rw-rw---- 1 root   adm    71 2007-02-13 10:51 /etc/courier/module.uucp
-rw-rw---- 1 root   adm    29 2008-08-14 15:21 /etc/courier/msgidhost
-rw-rw---- 1 root   adm   302 2007-02-13 10:51 /etc/courier/rfcerr2045.txt
-rw-rw---- 1 root   adm   332 2007-02-13 10:51 /etc/courier/rfcerr2046.txt
-rw-rw---- 1 root   adm   301 2007-02-13 10:51 /etc/courier/rfcerr2047.txt
-rw-rw---- 1 root   adm  1198 2007-02-13 10:51 /etc/courier/rfcerrheader.txt
-rw-rw---- 1 root   adm 12338 2008-08-14 22:07 /etc/courier/smtpaccess.dat

That's clearly wrong. It looks like you have Courier configured with userid daemon, groupid adm. All config files should therefore be owned by userid daemon, and not root. That's not a fatal error, since they're still readable by group adm, but it should be fixed.

The fatal error is that all of the above, with a small set of exceptions must be world-readable. That's why you have a broken server. All config files should be world-readable, and owned by the Courier userid/groupid except the ones that contain privileged data, such as passwords, which should be mode 0600.

The only file above that contains passwords is esmtpauthclient. That one should be mode 0600 (and owned by the Courier uid), all others must be world-readable.

Also, you are missing all the *.dist files. Rather than fix this mess by hand, one file at a time, you should just reinstall. It'll probably be faster than just trying to fix this disaster, one brick at a time.

Attachment: pgpCpGcC7bkwm.pgp
Description: PGP signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to