-----BEGIN PGP SIGNED MESSAGE-----

> echo $ac_n "checking for secured VPopmail Library""... $ac_c" 1>&6
> echo "configure:????: checking for secured VPopmail Library" >&5
> # First we need to see if vpopmail is installed.
> if [ -d ~vpopmail ]
> then
>   if [ ! -r ~vpopmail/lib/libvpopmail.a ]
>     then
>       echo "" 1>&6
>       echo "$ac_n""found...Please read VPopmail FAQ #??" 1>&6
>     else
>       echo "" 1>&6
>       echo "$ac_n""unsecured...recommended to upgrade to latest
> vpopmail version

ERROR: if user made libvpopmail.a readable, then the configure will
say "unsecured... blah blah blah". Really, I don't know how to check
for the lib version, but I think that something like this it's a
little bit correct:

if [ -d ~vpopmail ]
then
  if [ ! -r ~vpopmail/lib/libvpopmail.a -a `$HOW_TO_CHECK_LIBVERSION`
]
    then
      echo "" 1>&6
      echo "$ac_n""found...Please read VPopmail FAQ #??" 1>&6
    else
        if [ -r ~vpopmail/lib/libvpopmail.a -a `$HOW_TO_CHECK_LIBVERSION` ]
        echo "" 1>&6
        echo "$ac_n""found...ok, I can use libvpopmail.a" 1>&6
        fi
        if [ -r ~vpopmail/lib/libvpopmail.a -a ! `$HOW_TO_CHECK_LIBVERSION`
]
      then 
          echo "" 1>&6
          echo "$ac_n""found an old version... Please upgrade to VPopmail
5.xx" 1>&6
      fi
  fi
else
  echo "" 1>&6
  echo "$ac_n""not found... Please install VPopmail or check your
installation" 1>&6
fi

> Please keep all snickers to a minimum as this is my first attempt
> to play with the configure script...but this should be easilly
> fixable if it doesn't work.

:)
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^^^^^^^^^^^^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> 
> -----Original Message-----
> From: Charlie Chrisman [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 9:35 AM
> To: 'Tren Blackburn'; 'Ken Jones'
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> Open source at its best!!!  I love it.
> 
> Just thought I'd share my awe.
> 
> ; )
> 
> charlie
> 
> -----Original Message-----
> From: Tren Blackburn [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 10:50 AM
> To: 'Ken Jones'
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> *eek*  If that's the case let me see if I can build a proper stanza
> for the configure.in.  =)  That was just an example, didn't mean
> for you to use it.  *grin*
> 
> Tren.
> 
> -----Original Message-----
> From: Ken Jones [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 8:34 AM
> To: Tren Blackburn
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> Sounds like we already have a consensus.
> 
> I'll email MrSam and see if we can get your test code
> into the courier-imap configure.in
> 
> Ken
> 
> On Mon, 2001-09-10 at 09:26, Tren Blackburn wrote:
> > Hi Andrea;
> > 
> > I think that's a good suggestion.  Have the configure script
> > check for 
> 
> > the permissions of ~vpopmail/lib/libvpopmail.a
> > 
> >  if [ ! -r ~vpopmail/lib/libvpopmail.a ]
> >  then
> >    echo "You have a secured version of VPOPMail.  Please read
> > VPOPMail 
> 
> > FAQ #??"
> >    break
> >  else
> >    continue
> >  fi
> > 
> > But I think that's FAR preferable to changing the perms or having
> > *JUST* a FAQ item.
> > 
> > Cheers,
> > 
> > Tren.
> > 
> > -----Original Message-----
> > From: Andrea Cerrito [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, September 10, 2001 8:11 AM
> > To: Ken Jones
> > Cc: [EMAIL PROTECTED]
> > Subject: R: courier wants -lvpopmail
> > 
> > 
> >  
> > -----BEGIN PGP SIGNED MESSAGE-----
> > 
> > > If we do 1) we won't get these couerier-imap questions, but
> > > security 
> 
> > > won't be as tight. If we do 2) we will still get emails like
> > > this.  
> > > 
> > > I thought changing the permissions on vpopmail/lib directory
> > > would cause problems, that's why I was against it. But it seems
> > > security 
> is 
> > > of higher concern.
> > 
> > Hi Ken,
> > I think security on frontend servers (backend too) is more
> > important  that compile time ;) because:
> > 
> > - - if courier needs lvpopmail access just during compile time,
> > doing  a chmod o+r before compile and removing it at the end, it
> > isn't a very 
> 
> > hard work to do;
> > - - usually, you can compile apps on test machines and port them
> > just  compiled, so I really don't see the needs to remove a
> > tightened  security;
> > - - why not change courier configure? something like
> > 
> > Checking vpopmail... *** Warning! Found vpopmail 5.x: you have to
> >  temporary change permissions on [vpopmail/lib] as root!!!
> > 
> > Anyway, this is IMHO. ;)
> > - ---
> > Cordiali saluti / Best regards
> > Andrea Cerrito
> > ^^^^^^^^^^^^^^
> > Net.Admin @ Centro MultiMediale di Terni S.p.A.
> > P.zzale Bosco 3A
> > 05100 Terni IT
> > Tel. +39 0744 5441330
> > Fax. +39 0744 5441372
> > 
> > -----BEGIN PGP SIGNATURE-----
> > Version: PGPfreeware 7.0.3 for non-commercial use
> > <http://www.pgp.com>  
> > 
> > iQEVAwUBO5zKB/o9HK4+yTI3AQE9AAgAgo2gCzD8fJcIcaf65dlkxFk4u/72B2QU
> > pL6iqq++blMqo/qeDuJ2/fwLn1ttza3lReH+Hz5S2zha0xqX06MNo+tlJ9tYtmGy
> > y3GpVVs6mqLmf+QBDf1aU/wJBhO4iGi/P/WHLXmJpcUBc4Saw2dbxWay1OEBEHK3
> > ZnPfrVFCCQFqtbt+37YPvmZpsVQaSgDgFiTa/6L2zwzbyTb5G48JUi1J0KU6ngbd
> > uFLYMbbhT7iwpfR6icevCN+zb2qxdGLWNMneWGr6QSNab4ISgnuScnuEXx2wPJH8
> > ZjdCB4IfI/6y2cnsOFZ8UB/ixlx3qBIueYUmvu4a7CVHKwvqlWRgCQ==
> > =5whu
> > -----END PGP SIGNATURE-----
> > 
> > 
> > 
> 
> 
> 
> 
> 

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO53HSfo9HK4+yTI3AQF17wgAgyRYj302Ozr1zo8jca5M3sZ+jSsiog1N
DVm2XJ0AzwKcjK2MIXTcXXqo8G+PmwlYOVL2FHLwHEPV9bgdLTPn03zihcOMMPzQ
UwvnTvKwhJ2jFN7JxJFo3Ndbhhee3MSInCTFjlT5w6RSiGKHz7MG8dWB+If4d/Tt
abZuKD6raPtxb9syKf5+q4x/yaB4j28VxRn36hqMtcLr9Qda6wyhh1VkVqnliGAE
siEfPufaUwMNjj/SZ5S1gYmqiEhb5eUgF/QvwIjV5bG3a5XnQkXk78Lpw5IUmrOE
GrpNu1lMLxmSDNYmfR6fbxCX3zm0btxF3s0mnDX9lQL24zBMYXp7Dg==
=dp4t
-----END PGP SIGNATURE-----

Reply via email to