Johan Almqvist wrote:
> man 5 dot-qmail
>
> replace the dot (.) with a colon (:) in the name of the .qmail file, ie
> .qmail-ar:rubin
>
> -Johan
that man page says:
> WARNING: For security, qmail-local replaces any dots in ext with colons
> before checking .qmail-ext. For convenience, qmail-local converts any
> uppercase letters in ext to lowercase.
What exactly is the threat this is supposed to guard against? Is
it directory descending on vms, or access to the .. directory somehow?
I am not aware of a special case where dots in a file name will
unexpectedly hork a unix file system -- is it an obsolete fear, or a current
one that I don't know about?
This seems, without knowing what the threat is, an arbitrary exception.
--
David Nicol 816.235.1187 [EMAIL PROTECTED]
"people with fish eyes and brown socks"
