OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: JP (jp_at_msfree.ca)
Date: Tue Nov 05 2002 - 16:49:09 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi everyone,

    msec is reporting those files to be world writeable:

    Security Warning: World Writeable files found
                    - /var/spool/postfix/private/bounce
                    - /var/spool/postfix/private/bsmtp
                    - /var/spool/postfix/private/cleanup
                    - /var/spool/postfix/private/cyrus
                    - /var/spool/postfix/private/defer
                    - /var/spool/postfix/private/error
                    - /var/spool/postfix/private/flush
                    - /var/spool/postfix/private/ifmail
                    - /var/spool/postfix/private/lmtp
                    - /var/spool/postfix/private/local
                    - /var/spool/postfix/private/rewrite
                    - /var/spool/postfix/private/smtp
                    - /var/spool/postfix/private/tlsmgr
                    - /var/spool/postfix/private/uucp
                    - /var/spool/postfix/private/virtual
                    - /var/spool/postfix/public/pickup
                    - /var/spool/postfix/public/qmgr
                    - /var/spool/postfix/public/showq

    The permission on those file is :
    srw-rw-rw- 1 postfix postfix-group

    Do they really all have to be world writable ?
    Should i do something about this?
    Is it OK to leave it like this ?

    Thanks,

    JP
    jp at msfree dot ca

    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users