Hello 

I use cyrus (incl. sasldb2) , apache, sendmail and squirrelmail (incl. plugin 
to change the sasl password).
My problem is that /usr/local/etc/sasldb2.db needs the following right that 
squirrelmail can change the password in the db:

-rw-rw-rw-   1 root  cyrus   24576 20 Okt 11:46 sasldb2.db

This is a security hole, isn't it? Do you have any ideas?


-- 

Regards

Martin Schweizer
<[EMAIL PROTECTED]>

PC-Service M. Schweizer GmbH; Bannholzstrasse 6; CH-8608 Bubikon
Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch;
public key : http://www.pc-service.ch/pgp/public_key.asc; 
fingerprint: EC21 CA4D 5C78 BC2D 73B7  10F9 C1AE 1691 D30F D239;

Attachment: pgpcq90jzyFa8.pgp
Description: PGP signature

Reply via email to