[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sqwebmail
Subject:    Re: [sqwebmail] Re: SqWebMail Setuid Root question
From:       Sagara Wijetunga <sagaralists () yahoo ! com>
Date:       2003-10-24 17:09:41
[Download RAW message or body]


--- "Paul L. Allen" <pla@softflare.com> wrote:
> Check that directory permissions higher up aren't
> causing problems.
  

> > Does following statement in sqwebmail.c work when
> it
> > run under mailuser?
> > char	*templatedir=getenv("SQWEBMAIL_TEMPLATEDIR");
> 
> Suexec cleans out environment variables, leaving
> only those which
> were defined as being 'safe' when it was compiled. 
> Without
> adding SQWEBMAIL_TEMPLATEDIR to the list and
> recompiling suexec,
> it won't work.  That may be an acceptable solution
> to you if you
> need this and need it now, but it's going to be a
> pain for anyone
> who uses the pre-built Apache that comes with most
> distributions
> and wants to rely upon automatic updating mechanisms
> to get the
> latest release with security patches.
> 

I have not added SQWEBMAIL_TEMPLATEDIR to the suEXEC.
I'll later add it to suEXEC and try. 

Sagara

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

[prev in list] [next in list] [prev in thread] [next in thread]