If you're prepared to debug this, then I'd suggest you rebuild and install a
default (unpatched) sqwebmail, chown it to vmail:vmail, and try to replicate
the problem. If so, you can debug it by inserting fprintf(stderr,....)
statements at various points around the problem area.

I think I found a track! I have not used to running suid CGIs. I started thinking that maybe sqwebmail isn't executing under the privs I am expecting. I don't know any way to test this. Researching Apache docs revealed that I need suexec enabled, which I didn't have.


Now the funny thing is: why does it work when swqweb is mode 4755 root:wheel? It only stops working when I chown it to vmail:vmail. I am running Apache 2.0.47. The authdaemonvar is 700 vmail:vmail, so sqwebmail must have been root to be able to access it!

I'll let you know what I find out. Thank you very much for your time! It is so much fruitful when someone forces you to think. Banging one's head on the wall all alone is just frustrating.
--
Cheers,
Petri


Metis / Petri Riihikallio
GSM: +358 400 505 939



Reply via email to