Request 267 was acted upon.
_________________________________________________________________________

         URL: https://rt.openpkg.org/id/267
      Ticket: [OpenPKG #267]
     Subject: qpopper-4.0.5-20030918 user/pass not logged
  Requestors: [EMAIL PROTECTED]
       Queue: openpkg
       Owner: Nobody
      Status: new
 Transaction: Ticket created by thl
        Time: Thu Sep 18 22:57:40 2003
_________________________________________________________________________

This has been tracked down to be a file/dir permisson issue. When a user
logs in using USER/PASS commands, qpopper takes on the uid of the USER
and the gid of the spool directory (usually "mail" from /var/mail). The
OpenPKG default install lets fsl create a logfile with owner/group =
root/%{m_usr} and permissions 644. This will allow the session leader
of to log but inhibit child processes to log after PASS command does
setgid/setuid.

Quick and dirty workaround:
chmod 664 %{l_prefix}/var/qpopper/qpopper.log
chgrp mail %{l_prefix}/var/qpopper/qpopper.log #see /var/mail

Even more dirty
chmod 666 %{l_prefix}/var/qpopper/qpopper.log

This is problematic for various reasons:
- for OpenPKG v1.3 all CORE and BASE fsl enabled apps were modified to
  create the logfile on their own. Keeping this policy might require to
  create a separate (sgid on SV) log directory with "mail" gid (also a
  potential problem)

- until the logfile is modified manually, logs will be lost

- log rotation will be broken.

--
[EMAIL PROTECTED]
Development Team, Operations Northern Europe, Cable & Wireless

______________________________________________________________________
The OpenPKG Project                                    www.openpkg.org
Developer Communication List                   [EMAIL PROTECTED]

Reply via email to