It's a security concern.  If you compiled it with MySQL support, you can
run strings against the file and get the username and password you used
for the MySQL connection.  Just run the courier-imap configure with
--disable-root-check

Also, these questions have been answered in the past.  The mailing list
is a great source of information.

Regards,

Tren

-----Original Message-----
From: Ajai Khattri [mailto:[EMAIL PROTECTED]] 
Sent: Friday, February 07, 2003 10:38 AM
To: [EMAIL PROTECTED]
Subject: [vchkpw] Why hide ~vpopmail/lib ?



Why does the default install of vpopmail remove access to ~vpopmail/lib?

$ ls -l ~vpopmail

total 24
drwxr-xr-x    3 vpopmail vchkpw       4096 Feb  3 14:38 bin
drwxr-xr-x    5 vpopmail vchkpw       4096 Feb  3 14:38 doc
drwx------    5 vpopmail vchkpw       4096 Feb  4 01:31 domains
drwxr-xr-x    3 vpopmail vchkpw       4096 Feb  7 11:40 etc
drwxr-xr-x    3 vpopmail vchkpw       4096 Feb  3 14:38 include
drwx------    3 root     root         4096 Feb  3 14:38 lib


Since courier-imap insists on being built as a normal user, it fails to 
link in the vpopmail library... either you force it to make as root or 
you "chmod 755 ~vpopmail/lib".

-- 
Aj.
Systems Administrator / Developer





Reply via email to