Re: squirrelmail doesn't work after online update of suse linux 9.3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>> we have solved the problem!
>> The history:
>> Squirrelmail was running before a suse linux online update, but not
>> after
>> it.
>> The message of the Squirrelmail configtest after the update was:
>> ERROR: Data dir (/var/spool/squirrelmail/data/) does not exist!
>>
>> This error message is wrong. The Data dir /var/spool/squirrelmail/data/
>> exists. The absolute path of the data dir is outside of the htdocs tree.
>> With the Data dir and the attachment dir inside of the htdocs tree
>> (/srv/www/htdocs/squirrelmail) the Squirrelmail is running again.
>> It seems to be a security problem of PHP, but safe_mode is set to off
>> and open_basedir is not set.
>
> You have *avoided* your problem, not solved it.  It does sound
> suspiciously to me like one of the directories /var, /var/spool or
> /var/spool/squirrelmail does not have execute permission for the
> "other" class of user - and you ignored the suggestion to investigate
> this matter.  The point of having data and attachments OUTSIDE the
> htdocs tree is intentional and plenty of people successfully run it
> this way - a more secure way to do so.
>

the directories /var, /var/spool and /var/spool/squirrelmail have all
execute permission for the "other" class of user:
/var/spool # ls -lisa
total 183080
328322      4 drwxr-xr-x 16 root   root      4096 Dec  7  2007 .
328321      4 drwxr-xr-x 14 root   root      4096 Dec  7  2007 ..
361261      4 drwxr-xr-x  4 wwwrun root      4096 Dec  6  2007 squirrelmail

Bernd
schreiber@xxxxxxxxxxxxxx
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options):
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>
>



-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux