Re: dot-qmail security

Dave Sill ([EMAIL PROTECTED]) wrote:
: Joel Eriksson <[EMAIL PROTECTED]> wrote:
: >
: >That has nothing to do with the suggestion though, that the
: >_home-directory_ of the user should be owned by root. Perhaps you thought
: >it was Maildir which should be owned by root?..

: No, I thought the assertion was that making .qmail files owned by root 
: made them tamper-proof.

If the home partition is ext2fs, you can set the file attributes on
the .qmail file to immutable.  The file mode and ownership are then
irelevant, and only root can revoke that attribute.

Another way is to make a fake home partition, mount it ro, and tell
qmail via users/assign that home directories actually live there.

-harold