Date: Fri, 20 Oct 2006 12:17:48 +0200 From: Martin Schweizer <lists_freebsd@bluewin.ch> To: freebsd-questions@freebsd.org Subject: squirrelmail/sasldb2 access problem Message-ID: <20061020101748.GA26596@saturn.pcs.ms>
next in thread | raw e-mail | index | archive | help
--OgqxwSJOaUobr8KG Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello=20 I use cyrus (incl. sasldb2) , apache, sendmail and squirrelmail (incl. plug= in=20 to change the sasl password). My problem is that /usr/local/etc/sasldb2.db needs the following right that= =20 squirrelmail can change the password in the db: -rw-rw-rw- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db This is a security hole, isn't it? Do you have any ideas? --=20 Regards Martin Schweizer <info@pc-service.ch> PC-Service M. Schweizer GmbH; Bannholzstrasse 6; CH-8608 Bubikon Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch; public key : http://www.pc-service.ch/pgp/public_key.asc;=20 fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239; --OgqxwSJOaUobr8KG Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFFOKJMwa4WkdMP0jkRAnI8AJ4vnt6Sk+d2SLwaACwBcNmiRGdzRgCfdGvt tDrOqxxX0YBu0hAocg8+BOs= =5smG -----END PGP SIGNATURE----- --OgqxwSJOaUobr8KG--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061020101748.GA26596>