Hello after fresh install uw-imap i got spam in maillog about directory /var/spool/mail must have 1777 protection - i don`t think so this is good idea to give 1777 to /var/spool/mail .... Reproducible: Always Steps to Reproduce: 1. Install net-mail/uw-imap-2007e-r1 2. Enable POP3 service by editing /etc/xinetd.d/ipop3s, removing "disable=yes", and reloading xinetd 3. Send mail to a user on the system 4. Retrieve that mail using POP3 5. Check /var/log/maillog Actual Results: directory /var/spool/mail must have 1777 protection Expected Results: No warning
That is a bogus warning message. UW suggests the mail spool to be 1777 which will make it vulnerable to local DoS attacks. That is not an acceptable proposition. We can patch the UW sources and remove the warning. But the following alternatives are quicker/better: * Just ignore it in your logs * Configure your syslog program not to log this warning * Create /etc/c-client.cf with the following 2 lines: I accept the risk set disable-lock-warning 1
