On 12 Nov 01, at 16:03, [EMAIL PROTECTED] wrote:

> If you are doing this with PHP as an apache module, suexec doesn't
> matter.  PHP will run out of any directory under DocumentRoot, and if
> the server runs as 
> 
> User vpopmail
> Group vchkpw
> 
> you can exec _any_ of the commands in ~vpopmail/bin including
> vadddomain and vdeldomain.  Be careful!  

 You can run the commands but keep in mind vadddomain and 
vdeldomain will segfault if not ran as root. Reason being the 
vpopmail user can't write the required qmail files rcpthosts, 
virtualdomains and so on. You might be able to chown those files 
but I'm not sure how qmail would react to that.
 vdeldomain and vadddomain should be corrected to not segfault 
but instead give a proper error message when it can't write files.

Phil Wall
 

Reply via email to