Mailbox vulnerable?

[Hongwei Li]

Alexander,

Yes, I did cahnged the permission on /tmp:

# chmod 1777 /tmp

but never touched /var/spool/mail's permission.  Since then, I pay
attention to all warning message and found this one.  The pine package was
download, pine.tar.gz for Unix system, pine4.58.  I downloaded pine for
RH9, but it does not work.  Most users use SquirrelMail and EMUMail, some
users use Outlook Express and NetscapeMail, a few people still like pine
(that is why I downloaded and installed it). We had a problem when /tmp
had wrong permission.  Thanks for your help, after I change the
permission, these mail tools work normally.  But, I see this warning
message in system log, LogWatch to the root, and when trying a test
account's pine.

Should I remove the pine?  Will that make the warning not showing?

Thanks!

Hongwei

> Am Mo, den 28.06.2004 schrieb Olga um 16:04:
>
>> /var/spool/mail should have the following permissions:
>> drwxrwxrwt (it should have the sticky bit set).
>
> No, the default permissions are proper!
>
> Hongwei, we had exactly that topic on Thursday last week and I explained
> it to you. So what did you change and how do you use mail? Which pine
> (source or packager and version) do you use? How else do users read
> mail? Are the log entries caused by users using pine and a different
> mail client same time?
>
> Alexander
>
>
> --
> Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
> Fedora GNU/Linux Core 2 (Tettnang) on Athlon CPU kernel 2.6.6-1.435
> Serendipity 16:12:01 up 1 day, 17:59, load average: 0.48, 0.56, 0.61
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>