[ale] Pine and the mail spool

ari myo at thy.dyn.ml.org
Fri Oct 2 18:22:55 EDT 1998


make pine setgid-mail

chgrp mail pine (or chown root.mail pine)
chmod 2755 pine (or 2711, doesn't matter)

ari


Hat (hackrat at psiu.ml.org) said this stuff:

> Ever since I upgraded to pine 4.03 (and now 4.04 and 4.05), it's 
> been complaining that the mail spool is vunerable and it needs 
> 1777 protection. I changed the permissions on the mail spool and 
> the message goes away but I'm left wondering....
> 
> I used to have it the permissions/ownerships
> 
> drwxrwxr-x   2 root     mail
> 
> What is wrong with this and what makes this vunerable???
> 
> That and do I really want to allow random files to be created in 
> my mail spool?
> 
> -Hat






More information about the Ale mailing list