dovecot - Dec 2006 - [PATCH] don't force read bit on base_dir

Hi,

I would like to disallow dovecot to read its base_dir (mode 0310).
This is currently not possible, because settings_verify() in
src/master/master-settings.c will "fix" the directory mode to
0750.

The following patch for 1.0rc15 ignores the read bit (0444) when
checking the directory permissions.

Max

-------------- next part --------------
A non-text attachment was scrubbed...
Name: dovecot_dont_force_read_on_base_dir.patch
Type: text/x-diff
Size: 782 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20061218/dbf55a51/attachment-0002.bin>

On 2006-12-18 15:14:47 +0100, Max Kellermann wrote:
> I would like to disallow dovecot to read its base_dir (mode 0310).
> This is currently not possible, because settings_verify() in
> src/master/master-settings.c will "fix" the directory mode to
> 0750.
> 
> The following patch for 1.0rc15 ignores the read bit (0444) when
> checking the directory permissions.
why does it matter?

    darix

-- 
           openSUSE - SUSE Linux is my linux
               openSUSE is good for you
                   www.opensuse.org