>
>> Message: 1
>> From: <[EMAIL PROTECTED]>
>> To: <[EMAIL PROTECTED]>
>> Date: Mon, 5 Jan 2004 13:58:04 -0500
>> Subject: [SM-USERS] Why is the group SUID bit set on 1.4.2?
>>
>> This would appear to be a security risk.  I don't see any reason for it
>> and
>> 1.4.1 didn't have this set.
>>
>> Is this required, or was someone being naughty?
>>
>> Please reply directly.
>>
>> -Szii
>>
>>
>
> I also noticed this a few days ago.  I am using squirrelmail 1.4.2-1,
> downloaded from squirrelmail.org site; I am
> running it under RedHat 8.0 with all patches applied.  The previous
> version of squirrelmail was deleted prior to
> installing this one.

So, the RedHat rpm then?  Konstantin might be able to answer to that.  In
the immediate-term, you can simply chmod all of that away.  You shouldn't
need to change ownership away from root except where needed (per
installation instructions (data dir, etc))

 - Paul


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to