From owner-freebsd-security Fri Nov 24 13: 3:44 2000 Delivered-To: freebsd-security@freebsd.org Received: from hboss-bsd.powersurfr.com (hboss-bsd.powersurfr.com [24.108.165.216]) by hub.freebsd.org (Postfix) with ESMTP id 1139F37B4CF for ; Fri, 24 Nov 2000 13:03:42 -0800 (PST) Received: from localhost (akwan@localhost) by hboss-bsd.powersurfr.com (8.11.0/8.11.0) with ESMTP id eAOL4uT00252; Fri, 24 Nov 2000 14:04:57 -0700 (MST) (envelope-from akwan@hboss-bsd.powersurfr.com) Date: Fri, 24 Nov 2000 14:04:56 -0700 (MST) From: Al Kwan To: Ian Smith Cc: security@FreeBSD.ORG Subject: Re: INBOX Locked In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org /var/mail is readable by all. I figure they need read access to view the directory and their mailboxes within. Would their email still work if they didn't have read access to that dir? Al On Sat, 25 Nov 2000, Ian Smith wrote: > On Thu, 23 Nov 2000, Al Kwan wrote: > > > Hello all, > > > > Figured it out after much frustration. Hopefully if anyone else gets this > > problem you can learn from my errors.. > > > > Somehow my /tmp (/usr/tmp) directory permissions changed to: > > > > drwxr-xr-x - so groups and everyone didn't have write access to tmp > > > > Pine needs that to put the mailbox file in while it works on it and lets > > you delete messages and so forth. > > > > Change permission on the /usr/tmp directory to allow write access and the > > INBOX stops being "readonly". > > Sure, but .. > > > > /var/mail - permissions are rwx for owner/group/everyone > > .. are you sure your /var/mail is world writeable? If so, why? > > Ian > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message