procmail
[Top] [All Lists]

Re: Problems creating and writing to mailbox.

1997-04-21 18:47:00
Modifications to qpopper 2.3 work with the directory structure
(Less then 10 lines modified).  I have been able to create and write if
world permissions are set but this is a significant security hole.

*Which* world permissions?  Did you have the sticky bit on the (final)
directory in the path to the mailbox?

        I haven't set the sticky bit...yet. :(

        If I set the suid bit on procmail, is it as secure or more secure the
/bin/mail?
 
Anyway, you can just stick those 10 lines of C into the
auth_mailboxname() function in authenticate.c in the procmail source
tree, and procmail will deliver whereever you told it to.

        I haven't had the time to delve into the code...yet.  >;) 

Actually, once you've done that you can compile cucipop (a popper
daemon written by Stephen R. van den Berg, the author of procmail) with
the exact same copy of authenticate.c, and then ditch qpopper, but
that's optional.

        I been trying to find cucipop but I haven't been able to find a site 
that
has the source... any ideas where I can find it?

Philip Guenther

Thanks again...


                                                
flatline(_at_)bc(_dot_)sympatico(_dot_)ca