Hi Jonathan, <snip> > >> A trial run changing the config directory permissions to user >> keith.mastin and the config.php file permissions to apache:apache >> 0660 still doesn't give user keith.mastin access to the >> administrators window. > >I completely forgot now... but which version of SquirrelMail did you >say you were using again?
1.2.10 >> For all intents and purposes, it's working now with the current >> setup. the only question that I have is can you see any potential or >> real security issues with the config.php file owned by the listed >> administrator? > >Providing you take a look at the README file included on how to limit >who has access to that file, it should be okay. You just have to >remember with the file set like that, anybody that can get into that >directory can modify it. > Yeah, did that. The README says it's not very secure though... ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
