Ah, you're talking about running setuid programs.  This can be a tricky
issue, as there are some operating systems that can't securely run setuid
scripts.


On Wed, Apr 17, 2002 at 06:04:49AM +0200, Henk-Jan wrote:
>    2. Your openwebmail scripts may have wrong owner or mode.
>       The permission of
> 
>       openwebmail.pl, openwebmail-main.pl,
>       openwebmail-read.pl, openwebmail-viewatt.pl,
>       openwebmail-send.pl, openwebmail-spell.pl,
>       openwebmail-prefs.pl, openwebmail-folder.pl and checkmail.pl
> 
>       should be
> 
>       mode=4555
>       owner=root
>       group=mail

Have you checked this?


>    3. Your perl may be compiled with suid ability disabled.

Did you compile Perl yourself, or install from a vendor-provided package? 
If the latter, does the vendor provide a package for setuid perl?


>       c. Or use uty/suidwrap.pl to generate C wrappers for all suid scripts.
>          Here are the steps:
>          1. cd cgi-bin/openwebmail
>          2. perl uty/wrapsuid.pl /fullpath/cgi-bin/openwebmail

You can also try this, avoiding the setuid perl altogether.

 
Michael
--
Administrator                      www.shoebox.net
Programmer, System Administrator   www.gallanttech.com
--

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to