On Thu, Jun 19, 2008 at 11:52 PM, Ivars Strazdiņš <ivars.strazdins@xxxxxxxxx> wrote: > Paul Lesniewski wrote: >>>>> of course, I have checked the permissions of >>>>> /var/spool/squirrelmail/data/ directory. >>>>> Yesterday I set the permissions from /var/spool/squirrelmail/data/ >>>>> to 777 to test it. The same error. >>>>> This problem is not easy to solve. >>>>> >>>> What are the permissions on the files inside it? Why don't you show a >>>> listing of it here? You should also check the permissions on all the >>>> directories leading up to it to see that the web server can change >>>> into them (usually means "other" has "x" permission on each >>>> directory). >>>> >>> Not just permissions but the owner and group of the directories and >>> files, been caught by that one before. >>> >> >> The web server SHOULD NOT have ownership or group ownership of any of >> the directories below the data or attachment directory. Those >> directories should have ONLY execute permission for the "other" class >> of user. >> > I am confused. Does this mean that squirrelmail data and attachment > directories and below should have ownership of an user other that > webserver user? Not the data and attach directories themselves, but otherwise yes (of course! - it would be *horrible* security otherwise!) > If so, then what about Example in the link below? > http://www.squirrelmail.org/wiki/DataAndAttachmentsDirectories seems fine to me ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
