4 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] Re: group permissions?
FromSent OnAttachments
Johannes ErdfeltFeb 3, 2002 12:01 pm 
Sam VarshavchikFeb 3, 2002 12:08 pm 
Johannes ErdfeltFeb 3, 2002 1:00 pm 
Johannes ErdfeltFeb 3, 2002 1:23 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [maildropl] Re: group permissions?Actions...
From:Johannes Erdfelt (joha@erdfelt.com)
Date:Feb 3, 2002 1:00:41 pm
List:net.sourceforge.lists.courier-maildrop

On Sun, Feb 03, 2002, Sam Varshavchik <mrs@courier-mta.com> wrote:

Johannes Erdfelt writes:

I noticed that maildrop requires a different group than what courier uses. I assume this is because maildrop runs as this gid and it would be a security problem to access the queue directories, etc.

maildrop is not installed setgid, therefore the group ownership of the executable is mostly irrelevant.

Why is this check there for then?

. ../maildrop/uidgid || exit 1 if test "$gid" = "$mailgroup" then AC_MSG_WARN([ERROR: The maildrop and courier group id are the same:
$gid]) AC_MSG_WARN([ERROR: This is a security hole, they must be different!]) AC_MSG_ERROR([Use --enable-maildrop-gid, or --with-mailgroup, to set a
different maildrop or courier group id]) exit 1 fi

JE