Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Victor Duchovni
On Wed, Dec 01, 2010 at 10:09:30AM -0500, Wietse Venema wrote: > Apparently, FreeBSD copies the GID of a new directory from its > parent, even when the parent does not have sticky/setwhatever > bits set. It seems this applies not just to sub-directories, but also to new files: http://www.manpa

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Wietse Venema
Dan: > Gid inherits top level directory GID? Wietse: > Turn off the SETGID bit in the PARENT directory. Dan: > There is no setgid bit set. Apparently, FreeBSD copies the GID of a new directory from its parent, even when the parent does not have sticky/setwhatever bits set. bristle# mkdir /var/s

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Jeroen Geilman
On 12/01/2010 02:30 PM, Dan wrote: Thanks for your input, as far as proftpd goes: The distribution file available at the main distribution site and all mirrors has been compromised. The new file contains a rootkit. I downloaded the 1.3.3c source and confirmed. Passed it on to the ProFTPd aut

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Dan
Thanks for your input, as far as proftpd goes: The distribution file available at the main distribution site and all mirrors has been compromised. The new file contains a rootkit. Original file: Name: proftpd-1.3.3c.tar.bz2 Size: 4166609 MD5: 8571bd78874b557e98480ed48e2df1d2 SHA256: ea7f02e21f8

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Jeroen Geilman
On 12/01/2010 01:35 PM, Dan wrote: There is no setgid bit set. I had to chmod 777 the /website/vuser directory just so that new user creates would work otherwise when it changes uid to some virtual id such as 2003, it would not be allowed to create anything in the directory to begin with no

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Dan
There is no setgid bit set. I had to chmod 777 the /website/vuser directory just so that new user creates would work otherwise when it changes uid to some virtual id such as 2003, it would not be allowed to create anything in the directory to begin with no matter who owned it. Its really pr

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Wietse Venema
Dan: > > Gid inherits top level directory GID? Turn off the SETGID bit in the PARENT directory. Wietse

Re: virtual permissions and virtual_gid_maps problems

2010-12-01 Thread Dan
Gid inherits top level directory GID? sunsaturn:/website/vuser# rm -rf test2.com sunsaturn:/website/vuser# echo test|mail s...@test2.com sunsaturn:/website/vuser# ls -al test2.com/test2/Maildir/new/ total 6K drwx-- 2 2003 postfix 512 Dec 1 05:45 . drwx-- 5 2003 postfix 512 Dec 1 05:45

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Victor Duchovni
On Tue, Nov 30, 2010 at 10:26:20PM -0600, Dan wrote: > maildir.c mods: > > msg_info("TESTING1 set_eugid: euid %ld egid %ld", (long) usr_attr.uid, > (long) usr_attr.gid); > set_eugid(usr_attr.uid, usr_attr.gid); > msg_info("TESTING2 set_eugid: euid %ld egid %ld", (long) usr_attr.uid,

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Dan
maildir.c mods: msg_info("TESTING1 set_eugid: euid %ld egid %ld", (long) usr_attr.uid, (long) usr_attr.gid); set_eugid(usr_attr.uid, usr_attr.gid); msg_info("TESTING2 set_eugid: euid %ld egid %ld", (long) usr_attr.uid, (long) usr_attr.gid); Nov 30 22:21:55 sunsaturn postfix/vi

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Dan
#Chmod 755 mkdir problem# Ok enabling "virtual -v" and nuking /website/vuser with chmod 755 on it we have: Nov 30 21:08:47 sunsaturn postfix/virtual[25625]: deliver_mailbox[2]: recip te...@test2.com deliver te...@test2.com Nov 30 21:08:47 sunsaturn p

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Victor Duchovni
On Tue, Nov 30, 2010 at 07:39:39PM -0600, Dan wrote: > virtual_gid_maps = mysql:$config_directory/mysql_gids.cf > virtual_minimum_uid = 2002 > virtual_uid_maps = mysql:$config_directory/mysql_uids.cf > > Mysql relevant table entries: > > email domain maildir > te...@test.c

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Dan
My first time on list I appologise in advance for not just submitting a patch to problem, but I haven't coded C in about 12 years. I realize this would require someone to have access to a freebsd machine, patch code, and wait for a recompile to test, and I do appreciate time to do this. Howev

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Dan
As you request: postfix -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases config_directory = /usr/local/etc/postfix debug_peer_level = 2 header_checks = regexp:$config_directory/header_checks home_mailbox = Maildir/ html_directory = /usr/local/share/doc/postfix inet_interface

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Victor Duchovni
On Tue, Nov 30, 2010 at 10:49:39AM -0600, Dan wrote: > > On freebsd 8.0: standard install from ports collection: > > 1) virtual_gid_maps problems #GID does not appear to be working > virtual_gid_maps= mysql:$config_directory/mysql_gids.cf > #virtual_gid_maps= static:2001 > > > Post

Re: virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Brian Evans - Postfix List
On 11/30/2010 11:49 AM, Dan wrote: On freebsd 8.0: standard install from ports collection: 1) virtual_gid_maps problems #GID does not appear to be working virtual_gid_maps= mysql:$config_directory/mysql_gids.cf #virtual_gid_maps= static:2001 Instead of quoting sections of main.

virtual permissions and virtual_gid_maps problems

2010-11-30 Thread Dan
On freebsd 8.0: standard install from ports collection: 1) virtual_gid_maps problems #GID does not appear to be working virtual_gid_maps= mysql:$config_directory/mysql_gids.cf #virtual_gid_maps= static:2001 Postfix creates new directories/mail with gid of postfix user only,