Re: chmod settings

----- Original Message ----- 
From: "Gregory Hicks" <[email protected]>
To: <[email protected]>; <[email protected]>
Sent: Saturday, June 03, 2006 3:00 PM
Subject: Re: chmod settings


> > From: "Obantec Support" <[email protected]>
> > To: Subscribers of Qpopper <[email protected]>
> > Subject: chmod settings
> > Date: Sat, 3 Jun 2006 12:42:18 +0100
> >
> > Hi
> >
> > I am just going over the FAQ to make sure i have all the settings
> correct.
> >
> > /var/spool/mail is drwxrwxr-x (owned root.mail)
> >
> > mbox files are rw------- not rw-rw---- and mail seems to be flowing in
> and
> > out ok.
> > is there any reason the mbox file should be group rw
>
> Mail actually MAY get delivered vis the group permissions - depends on
> the MTA and/or mail delivery agent in use.
>
> Generally, the mail spool is owned by root with "mail" group
> permissions.  I've also seen the permissions be 1777.  Although some
> have argued that these perms can be used for a DOS by some local
> malicious user...
>
> >
> > mbox files are owned by username.mail
> >
> > just worried about the .lock comment.
> >
> > Mark
> >
>
> ---------------------------------------------------------------------
> Gregory Hicks                           | Principal Systems Engineer
> Cadence Design Systems                  | Direct:   408.576.3609
> 555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
> San Jose, CA 95134                      | Internet: [email protected]
>
> I am perfectly capable of learning from my mistakes.  I will surely
> learn a great deal today.
>
> "A democracy is a sheep and two wolves deciding on what to have for
> lunch.  Freedom is a well armed sheep contesting the results of the
> decision." - Benjamin Franklin
>
> "The best we can hope for concerning the people at large is that they
> be properly armed." --Alexander Hamilton
>
>
>
Hi

I am using sendmail with procmail and these chmod/owner settings seem to
have worked in the past. I do remember sendmail is fussy when you make bits
world rw but that's not the case here.

i'll run with it as is and see if i hit any issues

Mark