"Tom Corner" <[EMAIL PROTECTED]> wrote:
> I Listed all the directories as imap:
>
> imap@www:~/cyrus-imapd-2.0.14$ ls -ld /var/imap/socket/lmtp
> srwxrwxrwx 1 imap imap 0 May 30 22:33 /var/imap/socket/lmtp=
> imap@www:~/cyrus-imapd-2.0.14$ ls -ld /var/imap/socket
> drwxr-xr-x 2 imap imap 4096 May 30 22:33 /var/imap/socket/
> imap@www:~/cyrus-imapd-2.0.14$ ls -ld /var/imap
> drwxr-x--- 13 imap imap 4096 May 30 03:28 /var/imap/
> imap@www:~/cyrus-imapd-2.0.14$ ls -ld /var
> drwxr-xr-x 19 root root 4096 May 29 19:01 /var/
OK, these permissions show that only processes of user OR group
imap can get access to that socket (or root, but that can get
to anything :-). I haven't used deliver, so I don't know if
it runs setuid, but do an ls -l on that executable for its flags.
BTW, what's invoking deliver? Sendmail or something similar?
Regards,
Daryl Tester
