Re: [vchkpw] Permission $vpopmail/lib directory

[Mike Miller]

I'd agree now that I remember ( as I think I partook in that discussion a 
few years ago, but forgot about it ).  Agreed to leaving it 700 so that you 
need to be specifically aware if you change it.

 Thanks folks.
-M
_
Protect your PC - get McAfee.com VirusScan Online  
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

Re: [vchkpw] Permission $vpopmail/lib directory

[Doug Clements]

On Fri, Jul 04, 2003 at 11:58:43PM +, Mike Miller wrote:
 [vpopmail - 5.3.20]
 
 So I installed vpopmail and now I'm compiling courier-IMAP as a 
 non-root user (like a good boy).  Problem is, /var/vpopmail/lib and the 
 libvpopmail.a library are chmodded 700 without permissions besides root.  
 Maybe this should be 755 or 750 by default to allow such problems to link 
 with the static library.  I of course changed the permissions to allow 
 group permissions, but I think the default should allow.
 
 -M

755 would be a bad idea, since there's potentially sensitive information statically 
compiled into the librarys (like sql passwords) that could be easily read by other 
users. I usually just compile courier up to the point where it fails on that, then go 
back as root and re-run gmake. It finishes compiling and I've never had a problem with 
it. I think the correct solution would be fixing courier-imap to compile properly as 
root, but that's just my personal opinion.

--Doug

Re: [vchkpw] Permission $vpopmail/lib directory

[Geoff Sweet]

AS far as I have ever understood, the problem with relaxing the
permissions on this directory is that libvpopmail.a contains sensitive
information hardcoded into the library.  Things like the mysql
password.  After you have compiled you should tighten the perms back up.

G

On Fri, 2003-07-04 at 16:58, Mike Miller wrote:
 [vpopmail - 5.3.20]
 
  So I installed vpopmail and now I'm compiling courier-IMAP as a 
 non-root user (like a good boy).  Problem is, /var/vpopmail/lib and the 
 libvpopmail.a library are chmodded 700 without permissions besides root.  
 Maybe this should be 755 or 750 by default to allow such problems to link 
 with the static library.  I of course changed the permissions to allow group 
 permissions, but I think the default should allow.
 
 -M
 
 _
 Tired of spam? Get advanced junk mail protection with MSN 8.  
 http://join.msn.com/?page=features/junkmail
 

[vchkpw] Permission $vpopmail/lib directory

[Mike Miller]

[vpopmail - 5.3.20]

So I installed vpopmail and now I'm compiling courier-IMAP as a 
non-root user (like a good boy).  Problem is, /var/vpopmail/lib and the 
libvpopmail.a library are chmodded 700 without permissions besides root.  
Maybe this should be 755 or 750 by default to allow such problems to link 
with the static library.  I of course changed the permissions to allow group 
permissions, but I think the default should allow.

-M

_
Tired of spam? Get advanced junk mail protection with MSN 8.  
http://join.msn.com/?page=features/junkmail