From owner-freebsd-security Tue Aug 8 18:52:21 2000 Delivered-To: freebsd-security@freebsd.org Received: from kronus.com.br (dial-bhn-C8C0B48C.bhz.zaz.com.br [200.192.180.140]) by hub.freebsd.org (Postfix) with SMTP id 64F2E37B8DC for ; Tue, 8 Aug 2000 18:52:14 -0700 (PDT) (envelope-from cseg@kronus.com.br) Received: (qmail 952 invoked by uid 1000); 9 Aug 2000 01:58:35 -0000 Date: Tue, 8 Aug 2000 22:58:35 -0300 From: Fred Souza To: Matt Heckaman Cc: security@FreeBSD.org Subject: Re: pine 4.21 port issues? Message-ID: <20000808225835.A934@torment.secfreak.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Your message of "Tue, Aug 08 2000 00:28:35 -0400" X-Note: \x70\x73\x79\x63\x68 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Since very little in FreeBSD is ever done without a reason, I'm curious as > to the reason for this. It seems..wrong to have a port report a vulnerable > mailbox on a default FreeBSD installation. I would like to apologize for > the cross-post, but I felt it relevent to both lists. If this is incorrect > please inform me so that I don't make the same mistake again :) I was experiencing that kind of warning when using Pine 4.21 under 4.0-STABLE, and had to "fix" it with that silly mode-changing thing. Some time after, I decided to uninstall Pine and install Mutt, then returning /var/mail to root.mail 0775. This way, everytime the users were going to handle their incoming mail, they got a message "Mailbox is read-only". Going again into the silly root.mail 1777 solved the problem, but I definately don't like that idea. Any pointers on how to get rid of that? Cheers, Fred N Souza. -- This is what you get when you meet someone who has spent most of his/her entire life, thinking. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message