Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 179180 - net-mail/courier-imap - gentoo-{imapd,pop3d}.rc sources both non-ssl and ssl config files
Summary: net-mail/courier-imap - gentoo-{imapd,pop3d}.rc sources both non-ssl and ssl ...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-05-20 03:57 UTC by Chris Richards
Modified: 2008-02-03 11:13 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Richards 2007-05-20 03:57:01 UTC
/usr/lib/courier-imap/gentoo-pop3d.rc sources both /etc/courier-imap/pop3d and /etc/courier-imap/pop3d-ssl files.  This results in settings from pop3d-ssl overriding settings from pop3d, as well as settings from pop3d that we might not want in the pop3d-ssl server.  This same issue affects the imapd.rc, imapd-ssl.rc, and pop3d-ssl.rc files.

gentoo-pop3d.rc should source the pop3d config file ONLY.
gentoo-pop3d-ssl.rc should source the pop3d-ssl config file ONLY.
gentoo-imapd.rc should source the imapd config file ONLY.
gentoo-imapd-ssl.rc should source the imapd-ssl config file ONLY.

Reproducible: Always

Steps to Reproduce:
1. emerge courier-imap.
2. Configure imap, imap-ssl, pop3, and pop3-ssl services.
3. Observe that running configuration of services is the union of the settings in the normal and ssl files.  If the same setting exists in both files (normal and ssl), the ssl file setting wins.

Actual Results:  
normal service and ssl service both run with ssl settings.

Expected Results:  
normal service runs with non-ssl settings, while ssl service runs with ssl settings.
Comment 1 Chris Richards 2007-07-11 03:59:43 UTC
At the risk of being a nuisance, is this going to be fixed, or has it just fallen off the face of the planet? :)
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2008-02-03 11:00:37 UTC
Well seriously, ping! Anyone of the huge net-mail herd alive there?
Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-02-03 11:13:11 UTC
INVALID.
> This results in settings from pop3d-ssl overriding settings
> from pop3d, as well as settings from pop3d that we might
> not want in the pop3d-ssl server.
Look at the order of the settings. 
The ssl version reads (normal, ssl). The normal version reads (ssl, normal). The normal settings in the normal version will always override the settings from the SSL config file.

jakub: I haven't forgotten about courier-imap, but aside from having some minor open security issues, it isn't actually broken, so it's _very_ low on my priority list at the moment, and it will remain there until I get my own new mailserver up in 3-4 weeks.