Re: I give up...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> No, I've also problems with squirrelmail when trying to send emails
> with attachments (simple emails without attachments are OK):

I had a problem like this and the attachment dir 
(/var/spool/squirrelmail/attach/) had the wrong permissions. I changed the 
permissions and everything worked as expected with SElinux enabled and 
enforcing. I think the squirrelmail rpm is not setting the correct permissions 
on that dir.

Below is a note of the squirrelmail config script:
-------------------------------
Note:  There are a few security considerations regarding this
directory:
  1.  It should have the permission 733 (rwx-wx-wx) to make it
      impossible for a random person with access to the webserver
      to list files in this directory.  Confidential data might
      be laying around in there.
      Depending on your user:group assignments, 730 (rwx-wx---)
      may be possible, and more secure (e.g. root:apache)
  2.  Since the webserver is not able to list the files in the
      content is also impossible for the webserver to delete files
      lying around there for too long.
  3.  It should probably be another directory than the data
      directory specified in option 3.
--------------------------------

Maybe this helps,

Marcio


[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux