popa3d-users - Re: Mailbox symlink

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 18 Nov 2002 15:34:35 +0200
From: Gil Disatnik <jewnix@...hnohac.com>
To: popa3d-users@...ts.openwall.com
Subject: Re: Mailbox symlink

$HOME/Mailbox, yeah, my mistake.

I'll rebuild the package myself.

Thanks!
At 04:25 PM 11/17/2002 +0300, you wrote:
>On Sun, Nov 17, 2002 at 03:20:58PM +0200, Gil Disatnik wrote:
>
>Hi,
>
> > I am using popa3d that comes with slack-current (0.5.1).
> >
> > /var/spool/mail/<username> is in fact a symlink to $HOME/Maildir.
>
>You mean, to $HOME/Mailbox?
>
>Yes, that won't work.  The reason I've added safety checks to popa3d's
>mailbox opens is to defeat certain attacks possible specifically when
>mailboxes are in user-writable directories (that is, when popa3d is
>built with support for $HOME/Mailbox).  One such attack would be
>symlinking $HOME/Mailbox to /dev/zero.
>
>You really need to rebuild popa3d with support for $HOME/Mailbox, this
>is an option in params.h.
>
>As you're currently using the Slackware package, you need to choose
>one of:
>
>1. Modify the Slackware package to build popa3d with this option.
>
>2. Build popa3d manually, install under /usr/local (that's where "make
>install" would place it by default) and use that instead of the binary
>provided with Slackware.
>
>--
>/sd


Regards

Gil Disatnik
UNIX system/security administrator.

GibsonLP@...et

_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
"Windows NT has detected mouse movement, you MUST restart
your computer before the new settings will take effect, [ OK ]"
--------------------------------------------------------------------
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
not stand 1 bit of competition.
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.