[prev in list] [next in list] [prev in thread] [next in thread] 

List:       debian-devel
Subject:    Re: serious bug. Evolution and Microsoft mentality.
From:       Bernd Eckenfels <lists () lina ! inka ! de>
Date:       2002-01-09 22:20:56
[Download RAW message or body]

On Wed, Jan 09, 2002 at 01:20:16PM -0800, Jonathan Walther wrote:
> The perception of a possible permissions problem is bogus.  If you don't
> have permission in that directory to create the tmp mailbox, then you
> probably didn't have permission to blast over the original mailbox
> either.

It is very likely. Allowing to create files in the spooldir of a mbox style
spool means you are able to actually fake or dos other's mail receiving. It
is prefered to have only write access to you own mailbox. Normally a trusted
application is granted more access by running it sgid mail.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels@Wendelinusstrasse39.76646Bruchsal.de --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes@irc  +497257930613  BE5-RIPE
(O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!


-- 
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

[prev in list] [next in list] [prev in thread] [next in thread]