Amavis Mailing List Archive

From: Mark Martinec (Mark.Martinec+amavis@ijs.si)
Date: Thu Dec 16 2004 - 19:48:58 EST

• Next message: Gary Verchick: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Previous message: Achton N. Netherclift: "Re: [AMaViS-user] spam learning thoughts."
• In reply to: Gary Verchick: "[AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Next in thread: Gary Verchick: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"

Gary,

> Per INSTALL:
> chmod 644 /etc/amavis/amavisd.conf
> So I get:
> -rw-r--r-- 1 root root 13853 2004-11-22 07:48 /etc/amavis/amavisd.conf

> New 2.2.1-rc1 trial:
> FATAL: Directory of a config file "/etc/amavis/amavisd.conf"
> is writable by EUID 103, EGID 106 106 106
> TROUBLE in pre_loop_hook: SECURITY PROBLEM, ABORTING

So who is the owner of the directory /etc/amavis ?
If it is not root but is vscan, the files within can be compromised.

  Mark

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

• Next message: Gary Verchick: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Previous message: Achton N. Netherclift: "Re: [AMaViS-user] spam learning thoughts."
• In reply to: Gary Verchick: "[AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Next in thread: Gary Verchick: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"