well ... they can't delete anything in the spool-dir at all, because the
spool-files are owned by their owners and chmod 644.
The problem is that exim want's to create a lock-file in the spool-dir
which of course fails! Is it possible to have these lockfiles created
anywhere else?
Making the spool-dir owned by the exim-user doesn't help, because exim
first sets its uid to the target user, before creating the lockfile.
Jim Knoble wrote:
>
> Circa 2000-Aug-07 12:53:21 -0400 dixit Dave C.:
>
> : Exim does a set_euid() call to set the id to the user its delivering
> : mail to when making local deliveries.
> :
> : Either you need to set the exim group, and make sure /var/spool/mail is
> : chmog g+w, and is owned by the appropriate group, or leave it at 777,
> : but also set +t (sticky bit) - this prevents people from deleteing
> : other peoples mailspools.
>
> (but doesn't prevent them from writing to /var/spool/mail/ to begin
> with).
>
> --
> jim knoble | jmknoble@??? | http://www.jmknoble.cx/
>
> --
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
--
andreas gietl
gietl internet services
fon +49 9402 2551
fax +49 9402 2604
mobile +49 171 60 70 008
gietl@???
############################################
# Das Handbuch sagt, das Programm benötige #
# Windows 95 oder besser. Also habe ich #
# Linux installiert! #
############################################
