Oh, the vpopmail domain directories are not stored in the
vpopmail users' directory?  I see why the problem is
happening then.  I didn't even know that it was an option
to not put things there...

Dave
http://hostasaurus.com - $10 domain names

-----Original Message-----
From: Neil Blakey-Milner [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 30, 2001 7:45 AM
To: Hubbard, David
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: .qmailadmin-limits


On Tue 2001-01-30 (07:34), Hubbard, David wrote:
> If a user can log in and change a file that is owned by another user
> and you've got the correct, 644, permissions on it, then there are
> other problems with your system.  My .qmailadmin-limits files are
> owned by vpopmail and set 644 and the users can't touch them.

They can delete or move the file.  They have write permissions to the
directory.  You can use chflags/chattr to make the file unlinkable, or
possibly use sticky bit on the directory (so that only an owner of a
file may delete it).

Neil
-- 
Neil Blakey-Milner
[EMAIL PROTECTED]

Reply via email to