> On Wednesday, October 15, 2003, at 05:48  PM, Michael Bowe wrote:
> >   echo "localhost|0|vpopmailuser|vpoppasswd|vpopmail" >
> > ~vpopmail/etc/vpopmail.mysql
> >   chown vpopmail.vchkpw ~vpopmail/etc/vpopmail.mysql
> >   chmod 644 ~vpopmail/etc/vpopmail.mysql
>
> !!! WARNING !!!
>
> That should be chmod 600 instead of 644.  644 allows any user on the
> system to learn the MySQL username and password.

Thanks Tom

You are correct

I haved fixed that bug in my setup guides now

  http://www.pipeline.com.au/staff/mbowe/isp/vpopmail-mysql.htm
  http://www.pipeline.com.au/staff/mbowe/isp/webmail-server.htm

Anyone who has used my guide recently should also check their permissions on
that file

Michael.


Reply via email to