On Fri, Aug 15, 2008 at 09:38:17AM +0100, Andrew Martin wrote:
On Fri, Aug 15, 2008 at 09:01:13AM +0100, Andrew Harford wrote:
Why won't they be able to write to the index directory?
Sorry, should've been clearer.
On deathray, I've created for each user a /var/indexes/$username directory. We don't *want* them to be able to write to this themselves, which at the moment isn't a problem. But, if we move back to minerva and use the same setup, then obviously they will be able to write to /var/indexes. (they can log into the machine).
Is there a problem if someone does write to the index directory.
Cian's point about procmail is right though, that's executed on deathray, so could in theory be used to do whatever they want there. (thinking about it more, this is a security bug in general, users shouldn't be able to execute code on deathray).
I'm not sure there's a way around this if deathray is going to process mail. a. -- Andrew Harford System Administrator, DCU Networking Society Ordinary Member, Societies & Publications Committee Well, he's kind of had it in for me ever since I accidentally ran over his dog. Actually, replace "accidentally" with "repeatedly," and replace "dog" with "son." -- Lionel Hutz