Mailbox vulnerable?

[Alexander Dalloz]

Am Mo, den 28.06.2004 schrieb Hongwei Li um 17:16:

> After I set:
> 
> # chmod 1777 /var/spool/mail
> # ls -ld /var/spool/mail*
> drwxrwxrwt  2 root mail 4096 Jun 28 09:56 /var/spool/mail
> drwxr-xr-x  3 root root 4096 May 20 15:02 /var/spool/mailman
> 
> My SquirrelMail immediately failed and automatically log out with "Login
> failure error".  Then, I checked the system log, and found the followings:
> 
> Jun 28 09:57:46 morpheus imap(pam_unix)[29850]: authentication failure;
> logname= uid=0 euid=0 tty= ruser= rhost=127.0.0.1  user=hongwei

> I am afraid that other users will immediately complain to me, so I had to
> put it back as before, then I can use my squirrelmail.
> 
> What is wrong?  Thanks!
> 
> Hongwei

Leave the permissions as they are! Use the pine 4.60 RPM by Dag Wieers
which is made for FC1 and FC2 and contains some patches to cover locking
issues.

http://dag.wieers.com/packages/pine/

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) on Athlon CPU kernel 2.6.6-1.435 
Serendipity 17:25:46 up 1 day, 19:13, load average: 1.38, 1.05, 0.86 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040628/3ab858a1/attachment-0001.sig>