I noticed that vpopmail's vcdb.c failed to set secure permissions on the
vpasswd.cdb file. It was giving global read permissions! In a vpopmail
install where you install vpopmail exactly how it was ment to be run this is
not a big deal because the domains dir is 0700. I want/like to rely on the
domains dir though. Anyway attached and pasted below is my patch....
The 5.4.0 pre-releases set the umask before opening the file, so your patch shouldn't be necessary. As we're on the verge of a stable 5.4 release with numerous improvements over 5.2.2, we don't have any plans to make a 5.2.3 release.
-- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/
