yes it needs suid root...how else is it going to create files in vpopmail
dir. Another thought is running webserver with uid of vpopmail.
On Mon, 8 Jan 2001, Murat Ilker Balaban wrote:
> Date: Mon, 8 Jan 2001 16:15:38 +0200
> From: Murat Ilker Balaban <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: sqwebmail installed suid-root
>
>
> Hi, I am planning to move my production mailserver from sendmail to
> qmail+vchkpw, and thus installed sqwebmail today.
> However, I was thrilled to see the suid-root sqwebmail binary in my
> cgi-bin.
>
> Is this the default installation, or did I do smth wrong?
> - or -
> is there any incidences of break-in to a mailserver with the help
> of this-suid-root binary.
>
> I wanted to know your opinions about this issue,
> Thanx...
>
>
> [root@mailhub templates]# ls -l /usr/local/apache/cgi-bin/
> total 608
> -rwsr-xr-x 1 root root 299912 Jan 8 15:35 sqwebmail
> [root@mailhub templates]#
>
>
> -- Murat Balaban
>
