Thanks for your answer, but my home directory is not group writable (sorry, I should
have included this with my first post):
drwx------ 99 grover grover 8192 Nov 8 18:12 grover
I did just put a second hard drive in the machine, copied all of /home over to the new
drive (cp -a), and renamed the old /home directory (to /oldhome). It was the next
morning that I noticed these log entries -- coincidence??
Could this change have anything to do with these log entries?
BTW, I am still getting email, with no apparent problems (except for these log entries
which I don't understand).
--
Larry Grover, PhD
Assoc Prof of Physiology
Marshall Univ Sch Med
On Thu, 09 Nov 2000 18:36:13 +1100, Cameron Simpson <[EMAIL PROTECTED]> wrote:
>
> On Wed, Nov 08, 2000 at 05:08:49PM -0500, Larry Grover wrote:
> | Starting this morning, I'm getting dozens of entries like this in my maillog:
> |
> | Nov 8 13:01:04 muaq165 sendmail[3941]: NAA03940: forward
>/home/grover/.forward.muaq165: Group writable directory
> | Nov 8 13:01:04 muaq165 sendmail[3941]: NAA03940: forward /home/grover/.forward:
>Group writable directory
> |
> | I get these messages at irregular intervals of between about 1-15 mins.
> | Can anyone tell me what these messages mean?
>
> I would guess you've recently adjust some permissions.
>
> They are a security warning, saying that sendmail is not prepared to
> trust the .forward in your home dir because the dir is group writable,
> and therefore someone else (the other members of that group) could have
> moved your .forward aside and inserted one of their own to hack you.
> Are you still getting email? (If not, of course, then _this_ email will
> not help.)
>
> | I don't have a ".forward" or a ".forward.muaq165" in my home directory on this
> machine (muaq165). I run fetchmail on this machine (to grab mail from a MS Exc
> hange server) and procmail, and sendmail.
>
> No matter. I suggest you remove group write from your homedir (this is
> generally a good idea anyway - allow group access to some subdirs for
> special purposes by all means, but _not_ your homedir where some many
> of your personal control files live).
>
> | I don't know if this helps, but here's the relevant section of my ipchains:
>
> These messages have nothing to do with ipchains.
>
> Cheers,
> --
> Cameron Simpson, DoD#743 [EMAIL PROTECTED] http://www.zip.com.au/~cs/
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
