From owner-freebsd-security  Fri Nov 24 10:21:43 2000
Delivered-To: freebsd-security@freebsd.org
Received: from gaia.nimnet.asn.au (nimbin.lnk.telstra.net [139.130.45.143])
	by hub.freebsd.org (Postfix) with ESMTP id 0D7E937B479
	for <security@FreeBSD.ORG>; Fri, 24 Nov 2000 10:21:36 -0800 (PST)
Received: from localhost (smithi@localhost)
	by gaia.nimnet.asn.au (8.8.8/8.8.8R1.2) with SMTP id FAA12254;
	Sat, 25 Nov 2000 05:20:50 +1100 (EST)
	(envelope-from smithi@nimnet.asn.au)
Date: Sat, 25 Nov 2000 05:20:50 +1100 (EST)
From: Ian Smith <smithi@nimnet.asn.au>
To: Al Kwan <akwan@hboss-bsd.powersurfr.com>
Cc: security@FreeBSD.ORG
Subject: Re: INBOX Locked
In-Reply-To: <Pine.BSF.4.21.0011231701350.1048-100000@hboss-bsd.powersurfr.com>
Message-ID: <Pine.BSF.3.96.1001125050659.4975O-100000@gaia.nimnet.asn.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, 23 Nov 2000, Al Kwan wrote:

 > Hello all,
 > 
 > Figured it out after much frustration.  Hopefully if anyone else gets this
 > problem you can learn from my errors..
 > 
 > Somehow my /tmp (/usr/tmp) directory permissions changed to:
 > 
 > drwxr-xr-x  -  so groups and everyone didn't have write access to tmp
 > 
 > Pine needs that to put the mailbox file in while it works on it and lets
 > you delete messages and so forth.
 > 
 > Change permission on the /usr/tmp directory to allow write access and the
 > INBOX stops being "readonly".

Sure, but ..

 > > /var/mail - permissions are rwx for owner/group/everyone

.. are you sure your /var/mail is world writeable?  If so, why?

Ian



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message