From owner-freebsd-security Tue Aug 8 16:11:58 2000 Delivered-To: freebsd-security@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id 1796737B855 for ; Tue, 8 Aug 2000 16:11:54 -0700 (PDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id RAA94524; Tue, 8 Aug 2000 17:11:52 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id RAA44058; Tue, 8 Aug 2000 17:11:31 -0600 (MDT) Message-Id: <200008082311.RAA44058@harmony.village.org> To: Frank Tobin Subject: Re: pine 4.21 port issues? Cc: Matt Heckaman , freebsd-security@FreeBSD.ORG In-reply-to: Your message of "Tue, 08 Aug 2000 00:47:20 CDT." References: Date: Tue, 08 Aug 2000 17:11:31 -0600 From: Warner Losh Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message Frank Tobin writes: : Matt Heckaman, at 01:33 -0400 on Tue, 8 Aug 2000, wrote: : : > The point is, I strictly control world writable directories on my system, : > making /var/mail world writable to satisfy pine seems a silly thing to do : > in my opinion. I run qmail on the system through procmail, and all mail : > files are owned to the user name and group, ie the files themselves are : > not group owned to mail. : : Your safest course of action is actually to probably not even use : /var/mail, but rather have mailboxes directly in each user's home : directory. Qmail supports this. (/var/qmail/doc/INSTALL.mbox) I'm not sure how this is better for well behaved mail programs. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message