Hello Keith, On Saturday, January 25, 2003, Keith Mastin wrote... >>> [root@mail webmail]# chmod 0660 config/config.php >>> [root@mail webmail]# chown apache:shadow-readers config/config.php
>>So with the file owned by apache, and the group shadow-readers, and >>chmod 0660 you cannot edit the file through the admin plugin? > Can't even see it. The administrator's option doesn't show in the > options window. Curious. I'm assuming you've read the README for it right? There is an additional file that allows you to setup who really has access to the plugin. If you don't appear in that additional file, you cannot edit the config. That has no bearing on the permissions of the config/config.php file itself, but might be the reason why it isn't showing up. >>Silly question, what about the permissions for the config/ >>directory? Would that make any difference in the admin plugin's >>case? > drwxrwxr-x 2 kmastin apache 4096 Jan 4 12:39 config > A trial run changing the config directory permissions to user > keith.mastin and the config.php file permissions to apache:apache > 0660 still doesn't give user keith.mastin access to the > administrators window. I completely forgot now... but which version of SquirrelMail did you say you were using again? > For all intents and purposes, it's working now with the current > setup. the only question that I have is can you see any potential or > real security issues with the config.php file owned by the listed > administrator? Providing you take a look at the README file included on how to limit who has access to that file, it should be okay. You just have to remember with the file set like that, anybody that can get into that directory can modify it. -- Jonathan Angliss ([EMAIL PROTECTED]) ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
