From owner-freebsd-ports Tue Aug 8 6:56:24 2000 Delivered-To: freebsd-ports@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 7EF3337B8D3; Tue, 8 Aug 2000 06:56:19 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.9.3/8.9.3) with SMTP id JAA38930; Tue, 8 Aug 2000 09:56:00 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Tue, 8 Aug 2000 09:56:00 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Matt Heckaman Cc: FreeBSD-PORTS , FreeBSD-SECURITY Subject: Re: pine 4.21 port issues? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 8 Aug 2000, Matt Heckaman wrote: > This is a bad thing. The default permissions on FreeBSD for /var/mail are > root:mail 0775 which, in my opinion, is far better than 1777. I'm curious > as to why all of the sudden it is reporting the mailbox as 'vulnerable'. Dunno, but I agree with your conclusion that 0775 is better :-). > I've had a ton of users of mine freak out over this, and I must admit it's > odd. Pine aso has a new? depend on c-client4.7 which it did not have a few > months ago to my knowledge, as I have one pine build from March 19 that > does not have this depend or the mailbox warning. It sounds like a spurious warning from an over-zealous developer that did not plan for our mail delivery environment. I haven't been using Pine 4.21, but I think this is a warning that can be safely silenced in the port, although you probably want to get confirmation from others familiar with the Pine iand c-client mplementations before going ahead with that. Robert N M Watson robert@fledge.watson.org http://www.watson.org/~robert/ PGP key fingerprint: AF B5 5F FF A6 4A 79 37 ED 5F 55 E9 58 04 6A B1 TIS Labs at Network Associates, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message