From owner-freebsd-questions@FreeBSD.ORG Mon Jul 7 08:59:11 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 294B537B401 for ; Mon, 7 Jul 2003 08:59:11 -0700 (PDT) Received: from apex.homedns.org (syr-24-24-5-100.twcny.rr.com [24.24.5.100]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5545043FAF for ; Mon, 7 Jul 2003 08:59:10 -0700 (PDT) (envelope-from quadrant@apex.homedns.org) Received: from syr-24-24-5-100.twcny.rr.com (syr-24-24-5-100.twcny.rr.com [24.24.5.100]) by apex.homedns.org (8.12.9/8.12.9) with ESMTP id h67FxqVQ065251 for ; Mon, 7 Jul 2003 11:59:52 -0400 (EDT) (envelope-from quadrant@apex.homedns.org) From: quadrant To: freebsd-questions@freebsd.org Date: Mon, 7 Jul 2003 11:59:51 -0400 User-Agent: KMail/1.5.2 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200307071159.51505.quadrant@apex.homedns.org> Subject: /var/mail question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jul 2003 15:59:11 -0000 I was temporarilly using pine to retrieve my email, and upon exiting the program, pine notified me that the /var/mail directory was vulnerable, and advised a chmod 1777 of such. The default is 775. What are the implications of this, and won't 1777 make the folder more vulnerable? My understanding was that if the SUID bit is turned on for either U, G or O, that security is more at risk. Please let me know what I should do... Thanks, Eric