Squirrel mail ownership

Discussion in 'General' started by Toucan, Mar 15, 2011.

  1. Toucan

    Toucan New Member

    Squirrel mail has possibly has it's ownership and permissions changed accidentally through a sym link. Can someone let me know who the correct owning user and group should be for squirrel please.
    Last edited: Mar 15, 2011
  2. falko

    falko Super Moderator ISPConfig Developer

    On Debian Lenny, /usr/share/squirrelmail and all files/directories in it are owned by root:root.
  3. Toucan

    Toucan New Member

    That answered my question well but hasn't cured the problem, which must mean my question is wrong!

    If i access squirrel mail through myip/webmail it works fine. But if run it through symlink on a website it reports this error:
    Error opening ../config/default_pref
    Could not create initial preference file!
    /var/lib/squirrelmail/data/ should be writable by user web24
    Please contact your system administrator and report this error.

    Recently I changed that site from modphp to fastcgi with suexec. I have removed the suexec option and squirrel mail does now work through it. Are there any implications using fastcgi without suexec?
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    It renders the benefits of fastcgi vs. mod_php useless and is lesss ecure as all scripts will be run under the same user, so that it might be possible that one user accesses the scripts and files of other users.

    For that reason, ispconfig is not creating webmail syminks in the website directories. They simply dont work in many situations.
  5. Toucan

    Toucan New Member

    Understood, hence when suexec was enforced the site and proceeding symlinks were being run under web24 user.

    So if squirrel mail were accessed from a symlink of a site without suexec running, a potential harmful script could be included damaging both squirrel and the originating site?

    If squirrel is accessed directly through the ip, what user is it ran under then?
  6. falko

    falko Super Moderator ISPConfig Developer

    If you use the IP, the default vhost jumps in, so it is the user of that vhost.

Share This Page