Re: [gentoo-dev] vpopmail and company

2006-01-24 Thread A. Khattri
On Tue, 24 Jan 2006, Darryl Wagoner wrote: > I just did an emerge --update world which upgraded vpopmail. This update > was bad news. It switched vpopmail over to mysql based auths and storage of > email which I didn't have mysql or vpopmail setup for. This gave me a lot > of grief. Just and F

[gentoo-dev] vpopmail and company

2006-01-24 Thread Darryl Wagoner
Greetings,I just did an emerge --update world which upgraded vpopmail.  This update was bad news.  It switched vpopmail over to mysql based auths and storage of email which I didn't have mysql or vpopmail setup for.  This gave me a lot of grief.  Just and FYI. -- Darryl Wagoner - WA1GON"Evil triump

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Casey Allen Shobe
On Thursday 21 July 2005 00:32, Mike Frysinger wrote: > how is that not common operation ? SMTP AUTH is a pretty > critical feature imho It's not a supported on included part of qmail, which has not been modified in a number of years. The functionality is provided only via unofficial patches.

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Robin H. Johnson
On Thu, Jul 21, 2005 at 12:28:31AM +, Casey Allen Shobe wrote: > > chsh has also been vetted for security problems a LOT more > > closely than vchkpw. I don't trust vchkpw with suid-root. > Then use suidctl? I do on my production machines. > > The postfix maintainers were asked about it once b

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Mike Frysinger
On Wednesday 20 July 2005 03:04 am, Robin H. Johnson wrote: > On Wed, Jul 20, 2005 at 05:37:19AM +, Casey Allen Shobe wrote: > > I can confirm that - bincimap and qmail-pop3d run as root, so the > > setuid bit is not necessary. I believe this is also the case for > > dovecot 1.0 beta releases,

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Casey Allen Shobe
On Wednesday 20 July 2005 07:04, Robin H. Johnson wrote: > For common operation of qmail-smtpd, vchkpw is NOT required. SMTP > AUTH is the only reason qmail-smtpd would call vchkpw. True. Sorry for not realizing that. > chsh has also been vetted for security problems a LOT more > closely than vc

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Robin H. Johnson
On Wed, Jul 20, 2005 at 05:37:19AM +, Casey Allen Shobe wrote: > > So if this is still a problem in arch, but works in ~arch, you > > SHOULD file a bug report. > Why not just wait for the newer releases to make it to arch? See my note as to why they haven't moved yet, and consider testing them

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-19 Thread Casey Allen Shobe
On Wednesday 20 July 2005 02:43, Robin H. Johnson wrote: > This problem IS fixed in ~arch: > > line 190 of both vpopmail-5.4.10.ebuild and > vpopmail-5.4.9-r2.ebuild: chmod 4711 ${D}${VPOP_HOME}/bin/vchkpw Ahh okay, that explains things a bit. I'm using x86, which means 5.4.6. > So if this is s

[gentoo-dev] vpopmail

2005-07-17 Thread Jory A. Pratt
Lately I been the one handling all the vpopmail patches as soon as it is feisible I will add it or you can submit a patch to be viewed and possible added to the ebuild. Far as just joining the gentoo project read the becoming a developer section http://www.gentoo.org/proj/en/devrel/handbook/ha

[gentoo-dev] vpopmail ebuild permissions get changed.

2005-04-24 Thread Travis Butcher
After a rebuild the permissions get reset to defaults on /var/vpopmail/bin/vchkpw The smtp server runs as non root users and needs to be able to execute this program with suid permissions. Is there a way to keep the permssions from being altered? As a result rebuilding world breaks the server. T