[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: serious bug. Evolution and Microsoft mentality.



On Wed, Jan 09, 2002 at 01:20:16PM -0800, Jonathan Walther wrote:
> The perception of a possible permissions problem is bogus.  If you don't
> have permission in that directory to create the tmp mailbox, then you
> probably didn't have permission to blast over the original mailbox
> either.

It is very likely. Allowing to create files in the spooldir of a mbox style
spool means you are able to actually fake or dos other's mail receiving. It
is prefered to have only write access to you own mailbox. Normally a trusted
application is granted more access by running it sgid mail.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels@Wendelinusstrasse39.76646Bruchsal.de --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes@irc  +497257930613  BE5-RIPE
(O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!



Reply to: