Bill writes: 

> Sorry to bug y'all again, but what changes needed to be done to
> change sqwebmail from running SUID again? 

You must use one of the virtual authentication methods.  You cannot use 
authpwd, authshadow, or authpam. 

You must map all mail accounts to use the same uid and gid, in your 
authentication module. 

You still must install sqwebmail setuid, but owned by the virtual uid, else 
your virtual uid must be nobody, same as the web server. 

You must make all configuration files owned by virtual uid. 

You must use the configure option to make the login cache directory owned by 
the virtual uid. 

-- 
Sam 

Reply via email to