Date: Fri, 20 Oct 2006 13:29:04 +0200 From: "pobox@verysmall.org" <pobox@verysmall.org> To: freebsd-questions@freebsd.org Subject: Re: squirrelmail/sasldb2 access problem Message-ID: <4538B300.9020700@verysmall.org> In-Reply-To: <20061020101748.GA26596@saturn.pcs.ms> References: <20061020101748.GA26596@saturn.pcs.ms>
next in thread | previous in thread | raw e-mail | index | archive | help
Martin Schweizer wrote: > Hello > > I use cyrus (incl. sasldb2) , apache, sendmail and squirrelmail (incl. plugin > to change the sasl password). > My problem is that /usr/local/etc/sasldb2.db needs the following right that > squirrelmail can change the password in the db: > > -rw-rw-rw- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db > > This is a security hole, isn't it? Do you have any ideas? Did you ask this at Squirrelmail? I think there you will get more responses. Iv
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4538B300.9020700>