On Fri, 18 Feb 2005, Ken Jones wrote:

On Thursday 17 February 2005 8:44 pm, Charles Sprickman wrote:

Can anyone shed some light on this?  I've got maildirsize files randomly
flipping to root ownership.  I'm a bit confused as to how this could
happen - all delivery is done by vpopmail, and none of that stuff runs as
root.  That leaves courier-imap/pop, which do run as root.

So I posted to the courier list (asbestos on, check...) and Mr. Sam
replied that this is a "known bug in vpopmail".  Looking through the
vpopmail archives I don't see any sign of this.  I do see a few threads
about size miscalculations, but that's an entirely different issue.

Any ideas?

I checked the code and where the maildirsize file gets created it does not set the ownership. Most of the time the permissions get set with the setuid call. But if it gets called some other way without the setuid then the maildirsize file would probably be created as the owner of the process,not the owner of the directory.

Perhaps we should put some set ownership code around the creation
of the maildirsize file?

Should I go ahead and formally request that at the SF bug tracker? Re-reading this thread, I see Paul noted that he does see vuserinfo do this sometimes. I've never caught it, but if he has, that's good enough for me. The list of stuff that runs as root (as far as I know ALL vpopmail cli tools need to run as root) is really short...



Ken Jones

Reply via email to