Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 53920

Summary: relay-ctrl /var/spool/relay-ctrl/allow file permissions are incorrect.
Product: Gentoo Linux Reporter: Chris Neeser <chris>
Component: Current packagesAssignee: Qmail Team (OBSOLETE) <qmail-bugs+disabled>
Status: RESOLVED NEEDINFO    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: x86   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Chris Neeser 2004-06-14 14:56:54 UTC
When files are put into the /var/spool/relay-ctrl/allow, directory based on IP address they are put in with the permissions of the user who made the pop3 request to the server, so that if anyone else tries to write or read from the file they are denied access, this is what the perms look like:

drwxrwxrwt  2 root      root  272 Jun 14 15:39 .
drwxrwxrwx  3 root      root   96 Jun 14 12:04 ..
-rw-------  1 lkeith    users  12 Jun 14 15:21 220.51.26.28
-rw-------  1 chadk     users  11 Jun 14 15:39 219.173.37.194
-rw-------  1 toms      users  10 Jun 14 15:37 67.114.226.162
-rw-------  1 mminor    users  12 Jun 14 15:38 69.243.222.248
-rw-------  1 dave      users  10 Jun 14 15:39 60.144.192.8
-rw-------  1 gishihara users  15 Jun 14 15:17 62.167.38.175
-rw-------  1 efax1     users  11 Jun 14 15:34 63.167.63.95

In order for me to sort of get relay-ctrl to work I had to do chmod a+s to the relay-ctrl-check command so that it could read the indivual files.

Reproducible: Always
Steps to Reproduce:
I haven't tried a fresh install but just upgrade to relay-ctrl-3.1.1-r2 and it didn't really help matters any.


Expected Results:  
I expect the individual IP files to be owned by a single user, I haven't found
very much documentation on this so I don't really even know what user it should be.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-12-08 19:26:05 UTC
The files should come out as mode 666 and owned by the user that they represent. Do you use a weird umask or something?
Comment 2 Chris Neeser 2004-12-09 07:24:20 UTC
My umask is set to 22, I believe this is normal.
Comment 3 Michael Hanselmann (hansmi) (RETIRED) gentoo-dev 2005-08-07 04:01:39 UTC
Is this still an issue?