[vchkpw] Why hide ~vpopmail/lib ?

2003-02-07 Thread Ajai Khattri

Why does the default install of vpopmail remove access to ~vpopmail/lib?

$ ls -l ~vpopmail

total 24
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  3 14:38 bin
drwxr-xr-x5 vpopmail vchkpw   4096 Feb  3 14:38 doc
drwx--5 vpopmail vchkpw   4096 Feb  4 01:31 domains
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  7 11:40 etc
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  3 14:38 include
drwx--3 root root 4096 Feb  3 14:38 lib


Since courier-imap insists on being built as a normal user, it fails to 
link in the vpopmail library... either you force it to make as root or 
you chmod 755 ~vpopmail/lib.

--
Aj.
Systems Administrator / Developer




RE: [vchkpw] Why hide ~vpopmail/lib ?

2003-02-07 Thread Tren Blackburn
It's a security concern.  If you compiled it with MySQL support, you can
run strings against the file and get the username and password you used
for the MySQL connection.  Just run the courier-imap configure with
--disable-root-check

Also, these questions have been answered in the past.  The mailing list
is a great source of information.

Regards,

Tren

-Original Message-
From: Ajai Khattri [mailto:[EMAIL PROTECTED]] 
Sent: Friday, February 07, 2003 10:38 AM
To: [EMAIL PROTECTED]
Subject: [vchkpw] Why hide ~vpopmail/lib ?



Why does the default install of vpopmail remove access to ~vpopmail/lib?

$ ls -l ~vpopmail

total 24
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  3 14:38 bin
drwxr-xr-x5 vpopmail vchkpw   4096 Feb  3 14:38 doc
drwx--5 vpopmail vchkpw   4096 Feb  4 01:31 domains
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  7 11:40 etc
drwxr-xr-x3 vpopmail vchkpw   4096 Feb  3 14:38 include
drwx--3 root root 4096 Feb  3 14:38 lib


Since courier-imap insists on being built as a normal user, it fails to 
link in the vpopmail library... either you force it to make as root or 
you chmod 755 ~vpopmail/lib.

-- 
Aj.
Systems Administrator / Developer