Rick Updegrove writes:
> This is a re-post sorry - I am trying a new name to see if this gets
> anyone's attention
> http://www.mail-archive.com/sqwebmail%40inter7.com/msg01593.html
>> Rick Updegrove writes:
>>
>> > I tested the send as attacthment and its working fine now.
>
> Oops, I spoke too soon.
> Ok the forward as attachment did send but because of this patch as soon as I
>
> [root@mail cgi-bin]# chown vpopmail.vchkpw sqwebmail
>
> I can no longer log onto sqwebmail as any user (qmailadmin still works)
> until I first
One has nothing to do with the other.
>
> cd /usr/local/src/qmail/sqwebmail-1.2.5
>
> then
>
> [root@mail sqwebmail-1.2.5]# make install-strip
> [root@mail sqwebmail-1.2.5]# make install-configure
>
> Now I can log in again. Just doing a
>
> [root@mail cgi-bin]# chown root.root sqwebmail
>
> didn't seem to work but mail has been down enough for today I can wait for a
> reply before proceeding.
The sqwebmail executable needs to be installed setuid.
> I do not want to run sqwebmail as root .. Do I? I didn't have to before,
> unless I am dreaming now.
There is some information in the SECURITY file about running sqwebmail
exclusively as vpopmail.
> #3 what is up with those kernel logs down there they are from the other day?
> Note that I haven't seen any today like that.
>
>
> from /var/log/kernel/errors
>
> Mar 9 19:27:01 mail kernel: Security: denied hard link to 0.0 for UID 48,
> EUID 572, process sqwebmail:2001
You are running a non-standard kernel that was hacked with a supposedly
"secure" patch, but which doesn't really accomplish anything useful.
Install a regular kernel, without any screwy patches.
--
Sam
