RE: .qmailadmin-limits

[Hubbard, David]

If a user can log in and change a file that is owned by another user and you've got the correct, 644, permissions on it, then there are other problems with your system.  My .qmailadmin-limits files are owned by vpopmail and set 644 and the users can't touch them.   Dave -----Original Message----- From: Sumith Ail [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 30, 2001 5:26 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: .qmailadmin-limits Hello,   I am using VPOPMAIL 4.9.8 with MySQL and Qmailadmin 0.39 on my RH 6.2 box.   I would like to impose restriction on number of POP accounts/ Aliases / etc., a domain admin creates   So, I created a .qmailadmin-limits file in "/home/test/domains/test.com/.qmailadmin-limits" as described in the qmailadmin INSTALL.. BUT the user test can login thru FTP or telnet and delete this file and gain unlimited number of Email accounts.   Can anyone please let me know on what would be the workaround for this scenario.   I tried changing the file permissions of .qmailadmin-limits file to root and vpopmail but still the user can delete this file.   What to do??   Regards Sumith