On Wed, Aug 13, 2003 at 04:18:26PM +0200, Holger Hecht wrote: > Dear Listmembers, > > could any of you force sqwebmail to work under the chrooted environment of > apache on an OBSD system? Is there a principle problem with this or could it > work?
I can't see a fundamental problem, but of course all your maildirs will have to be inside the chrooted environment as well, and your database will have to have home directories relative to this, not to the 'true' root. And your chrooted environment will have to include all the shared libraries which sqwebmail is linked against (use 'ldd' to list them). If using authdaemond its socket will have to be in the chroot environment too. I'd say it's probably not worth the effort; on the other hand, sqwebmail *is* a setuid root application, so arguably you should take precautions when running it. Cheers, Brian.
