Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 17 Nov 2002 16:25:38 +0300
From: Solar Designer <>
Subject: Re: Mailbox symlink

On Sun, Nov 17, 2002 at 03:20:58PM +0200, Gil Disatnik wrote:


> I am using popa3d that comes with slack-current (0.5.1).
> /var/spool/mail/<username> is in fact a symlink to $HOME/Maildir.

You mean, to $HOME/Mailbox?

Yes, that won't work.  The reason I've added safety checks to popa3d's
mailbox opens is to defeat certain attacks possible specifically when
mailboxes are in user-writable directories (that is, when popa3d is
built with support for $HOME/Mailbox).  One such attack would be
symlinking $HOME/Mailbox to /dev/zero.

You really need to rebuild popa3d with support for $HOME/Mailbox, this
is an option in params.h.

As you're currently using the Slackware package, you need to choose
one of:

1. Modify the Slackware package to build popa3d with this option.

2. Build popa3d manually, install under /usr/local (that's where "make
install" would place it by default) and use that instead of the binary
provided with Slackware.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.