Blah. I've never looked at the configure script before, so I honestly
don't know if this will work, but it's a good start. My previous logic
was bad because if you didn't have vpopmail installed (not a requisite
for courier...but maybe it should be? ;) it would bomb. Now it checks
for vpopmail, then for secured vpopmail library.
echo $ac_n "checking for secured VPopmail Library""... $ac_c" 1>&6
echo "configure:????: checking for secured VPopmail Library" >&5
# First we need to see if vpopmail is installed.
if [ -d ~vpopmail ]
then
if [ ! -r ~vpopmail/lib/libvpopmail.a ]
then
echo "" 1>&6
echo "$ac_n""found...Please read VPopmail FAQ #??" 1>&6
else
echo "" 1>&6
echo "$ac_n""unsecured...recommended to upgrade to latest vpopmail
version
" 1>&6
fi
fi
Please keep all snickers to a minimum as this is my first attempt to
play with the configure script...but this should be easilly fixable if
it doesn't work.
Regards,
Tren.
-----Original Message-----
From: Charlie Chrisman [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 9:35 AM
To: 'Tren Blackburn'; 'Ken Jones'
Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
Subject: RE: courier wants -lvpopmail
Open source at its best!!! I love it.
Just thought I'd share my awe.
; )
charlie
-----Original Message-----
From: Tren Blackburn [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 10:50 AM
To: 'Ken Jones'
Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
Subject: RE: courier wants -lvpopmail
*eek* If that's the case let me see if I can build a proper stanza for
the configure.in. =) That was just an example, didn't mean for you to
use it. *grin*
Tren.
-----Original Message-----
From: Ken Jones [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 8:34 AM
To: Tren Blackburn
Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
Subject: RE: courier wants -lvpopmail
Sounds like we already have a consensus.
I'll email MrSam and see if we can get your test code
into the courier-imap configure.in
Ken
On Mon, 2001-09-10 at 09:26, Tren Blackburn wrote:
> Hi Andrea;
>
> I think that's a good suggestion. Have the configure script check for
> the permissions of ~vpopmail/lib/libvpopmail.a
>
> if [ ! -r ~vpopmail/lib/libvpopmail.a ]
> then
> echo "You have a secured version of VPOPMail. Please read VPOPMail
> FAQ #??"
> break
> else
> continue
> fi
>
> But I think that's FAR preferable to changing the perms or having
> *JUST* a FAQ item.
>
> Cheers,
>
> Tren.
>
> -----Original Message-----
> From: Andrea Cerrito [mailto:[EMAIL PROTECTED]]
> Sent: Monday, September 10, 2001 8:11 AM
> To: Ken Jones
> Cc: [EMAIL PROTECTED]
> Subject: R: courier wants -lvpopmail
>
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
>
> > If we do 1) we won't get these couerier-imap questions, but security
> > won't be as tight. If we do 2) we will still get emails like this.
> >
> > I thought changing the permissions on vpopmail/lib directory would
> > cause problems, that's why I was against it. But it seems security
is
> > of higher concern.
>
> Hi Ken,
> I think security on frontend servers (backend too) is more important
> that compile time ;) because:
>
> - - if courier needs lvpopmail access just during compile time, doing
> a chmod o+r before compile and removing it at the end, it isn't a very
> hard work to do;
> - - usually, you can compile apps on test machines and port them just
> compiled, so I really don't see the needs to remove a tightened
> security;
> - - why not change courier configure? something like
>
> Checking vpopmail... *** Warning! Found vpopmail 5.x: you have to
> temporary change permissions on [vpopmail/lib] as root!!!
>
> Anyway, this is IMHO. ;)
> - ---
> Cordiali saluti / Best regards
> Andrea Cerrito
> ^^^^^^^^^^^^^^
> Net.Admin @ Centro MultiMediale di Terni S.p.A.
> P.zzale Bosco 3A
> 05100 Terni IT
> Tel. +39 0744 5441330
> Fax. +39 0744 5441372
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
>
> iQEVAwUBO5zKB/o9HK4+yTI3AQE9AAgAgo2gCzD8fJcIcaf65dlkxFk4u/72B2QU
> pL6iqq++blMqo/qeDuJ2/fwLn1ttza3lReH+Hz5S2zha0xqX06MNo+tlJ9tYtmGy
> y3GpVVs6mqLmf+QBDf1aU/wJBhO4iGi/P/WHLXmJpcUBc4Saw2dbxWay1OEBEHK3
> ZnPfrVFCCQFqtbt+37YPvmZpsVQaSgDgFiTa/6L2zwzbyTb5G48JUi1J0KU6ngbd
> uFLYMbbhT7iwpfR6icevCN+zb2qxdGLWNMneWGr6QSNab4ISgnuScnuEXx2wPJH8
> ZjdCB4IfI/6y2cnsOFZ8UB/ixlx3qBIueYUmvu4a7CVHKwvqlWRgCQ==
> =5whu
> -----END PGP SIGNATURE-----
>
>
>
