If I would have to do something like this, I would use (for example)

mount --bind /data01/var/assp/okmail  /usr/local/bin/assp2/okmail

this mount is also supported in /etc/fstab

when ever I installed assp on a linux system the install path was 
'/opt/assp' on BSD I used '/home/assp/assp' (/home/assp contains also the 
Perl for assp, all required binaries and libs for assp - this prevents 
collisions with possible system version requirements - don't forget to 
adjust the path / libpath / ....)

>Which features?

at least the GUI checks the request to open a file - if a '..' is found, 
the request is canceled for security reasons

- you can't open files in MailogTail (GUI)
- FC will not work

but other features may also affected

Thomas





Von:    James Moe <[email protected]>
An:     For Users of ASSP <[email protected]>
Datum:  17.08.2015 18:36
Betreff:        Re: [Assp-user] Filename of spam/ham messages is different 
in v1 and v2?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/16/2015 10:36 PM, Thomas Eckardt wrote:
> /usr/local/bin/assp2/../../../../data01/var/assp/okmail/--31497.eml
>
>  notice: having '..' in the filenames will prevent several features
> from work !
> 
  Which features? I know chroot will not work.
  I needed to move the message store to a different volume because of
storage restrictions where assp is installed. Because $base is
prepended to all of the paths, defeating a simple solution, I resorted
to the use of "../" to get the messages stored where I want them.
  I suppose I could move the whole installation to the new location.
But that seems wrong from an admin and system view, placing an
executable in a data storage area.

- -- 
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlXSDToACgkQzTcr8Prq0ZNs1QCfZU4D3lUV6TwYYgfZrqTweXlQ
njIAoKBDXMe83HEa7lzkO7IgwlLzHIay
=NgUV
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to