OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: .forward & alias operation

From: Ken Gillett (kenukgb.net)
Date: Wed May 28 2003 - 10:49:23 CDT


On Wednesday, May 28, 2003, at 03:12 pm, Wietse Venema wrote:

> Ken Gillett:
>> ...a .forward in the user's
>> home directory can utilise that user's permissions and the message
>> does
>> get appended to the file, but there's still an error:
>>
>> "warning: unable to create lock file /var/spool/mail/ken.lock:
>> Permission denied"
>>
>> yet the message IS appended so the process CAN write to files in that
>> directory. Why can it not create this file? Does it matter? How can I
>> eliminate this error?
>
> You have a /var/mail that requires group write privileges.
> One workaround is to chmod 1777.

I did think of that, but isn't it rather insecure?

What user is Postfix running as when it attempts to create these lock
files? I thought it was postfix, but doesn't seem to be. If I know the
user trying to create the lock file then I can try and allow access
without making it world writable.

>> I've noticed another oddity. The timestamps on maillog entries are
>> correct for postfix/local, but the pickup, cleanup and nqmgr are some
>> 3
>> hours out. I did correct the time after booting and first running
>> Postfix, but, time is now correct and I've re-started Postfix, but
>> these lines are still being created wrong. Where's it getting this
>> time
>> from?

I'm getting the following on startup:

        warning: /var/spool/postfix/etc/localtime and /etc/localtime differ
        warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ

Why are there separate copies of these files? Can't I just link to the
main ones in /etc so they'll never 'differ'?

Ken G i l l e t t

_/_/_/_/_/_/_/_/_/