>
> Rodrigo Borges Pereira <[EMAIL PROTECTED]> wrote:
>
> > I'd like to know if it's possible to chmod 750 the directories under
> > [/var/qmail/] so that no one can go in there and check my configuration
> > files, without disrupting qmail's functioning.
>
> Why don't you try it and see?  Any problems should show up very
> quickly in the
> qmail-send or qmail-smtpd logs.  Personally, I don't see it being
> a problem
> for qmail-send -- qmail-smtpd depends on which user and group you run
> qmail-smtpd as.
>
> However, there's no security-critical data in there -- why do you
> want to keep
> this data secret?  What problem are you trying to solve?  If you
> have local
> users who could use this (fairly innocuous) data to subvert your system,
> you've got bigger problems.
>

It's not that it's a problem.. i know the data is innocuous, but there's
always some users who like to check the configs.. and browse around, see for
what domains i treat mail.. i just don't want to give them that
pleasure/possibility :) I asked this on the list because i didn't want to
disrupt the mail system, since this box is in production.. i just wanted to
be sure it would be ok or not ok before doing it.

Reply via email to