Sam Varshavchik wrote:
> Alessandro Vesely writes:
> 
>> Sam,
>> is there a reason why rx permissions are not given to webmail?
>> [EMAIL PROTECTED]@/courier/webmail        700    x    root    bin
>> [EMAIL PROTECTED]@/courier/webmail        755    x    root    bin
> 
> Because webmail is started by root.

I meant the small (~17K) cgi executable, not the daemon. Well, 
actually, the directory it leaves in.

> It needs to start as root, of 
> course, in order to drop root to the appropriate uid/gid for each 
> account.

Hm... I found a setuidgid() function in sqwebmail.c, but I have no 
clue about how it works. The small exec is in the directory mentioned 
above, and is not setuid. I just placed a symbolic link to it from an 
Apache's cgi-bin directory. It apparently works alright. Isn't that 
the correct way to install it?

TIA
Ale














































-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to