[ale] Pine and the mail spool
ari
myo at thy.dyn.ml.org
Fri Oct 2 18:22:55 EDT 1998
make pine setgid-mail
chgrp mail pine (or chown root.mail pine)
chmod 2755 pine (or 2711, doesn't matter)
ari
Hat (hackrat at psiu.ml.org) said this stuff:
> Ever since I upgraded to pine 4.03 (and now 4.04 and 4.05), it's
> been complaining that the mail spool is vunerable and it needs
> 1777 protection. I changed the permissions on the mail spool and
> the message goes away but I'm left wondering....
>
> I used to have it the permissions/ownerships
>
> drwxrwxr-x 2 root mail
>
> What is wrong with this and what makes this vunerable???
>
> That and do I really want to allow random files to be created in
> my mail spool?
>
> -Hat
More information about the Ale
mailing list