From: AlxFrag (alxfraggmail.com)
Date: Wed Jan 09 2008 - 05:48:38 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Patrick Ben Koetter wrote:
> * AlxFrag <alxfraggmail.com>:
>
>> mouss wrote:
>>
>>> AlxFrag wrote:
>>>
>>>>> if courier is suid, it can access any file.
>>>>>
>>>> The solution to this problem was:
>>>>
>>>> |chmod o+x /usr/local/var/spool/authdaemon
>>>>
>>> it may be safer to play on groups instead of opening the directory to
>>> every user (including nobody) on the machine.
>>>
>> You're right. I changed the permissions using chmod 770 authdaemon so as
>> all members in the group "root" can access the socket.
>> I put user "postfix" in the group "root" but it doesn't work :(
>>
>
> Don't!
>
> Create a new group. Add Courier and Postfix to that group. Give permissions to
> the group to access that directory.
>
>
>
>
>
>
ok thanks. I did exactly what you said and it works.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]