I pulled mine from the SM site mirror in Arizona. (source, no RPMs) -Szii
----- Original Message ----- From: "p dont think" <[EMAIL PROTECTED]> To: "Douglas Campbell" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, January 08, 2004 3:21 AM Subject: Re: [SM-USERS] setuid on in squirrelmail 1.4.2-1 > > > >> Message: 1 > >> From: <[EMAIL PROTECTED]> > >> To: <[EMAIL PROTECTED]> > >> Date: Mon, 5 Jan 2004 13:58:04 -0500 > >> Subject: [SM-USERS] Why is the group SUID bit set on 1.4.2? > >> > >> This would appear to be a security risk. I don't see any reason for it > >> and > >> 1.4.1 didn't have this set. > >> > >> Is this required, or was someone being naughty? > >> > >> Please reply directly. > >> > >> -Szii > >> > >> > > > > I also noticed this a few days ago. I am using squirrelmail 1.4.2-1, > > downloaded from squirrelmail.org site; I am > > running it under RedHat 8.0 with all patches applied. The previous > > version of squirrelmail was deleted prior to > > installing this one. > > So, the RedHat rpm then? Konstantin might be able to answer to that. In > the immediate-term, you can simply chmod all of that away. You shouldn't > need to change ownership away from root except where needed (per > installation instructions (data dir, etc)) > > - Paul > > ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
