|
From: Paul L. <pa...@sq...> - 2013-06-24 23:14:30
|
> I think the problem with setgroups(0, NULL): Operation not permitted has
> been resolved.
If you don't say *how* -- explain carefully what you changed, what
your current settings are, then you leave us to guess. This is
frustrating and you are less likely to receive any help this way.
> At the first time I set
> 'SUID_LOCATION' => array('VALUE' =>
> '/var/www/html/webmail/plugins/server_settings_backend/suid_backend/squirrelmail_server_settings_suid_backend'),
>
> I find in the /var/www/html/webmail/plugins/server_settings_backend also has
> a squirrelmail_server_settings_suid_backend, and the file permission is
> -rwsr-xr-x.
>
> So I change the SUID_LOCATION value to
> /var/www/html/webmail/plugins/server_settings_backend/squirrelmail_server_settings_suid_backend
The only examples I can find point to the server_settings_backend
directory. The copy of the suid_wrapper in the suid_backend directory
shouldn't be used in your configuration. (I believe this is your
oversight, unless you can point out where there was a misleading
example.)
> But get another error "Remote file name cannot contain "/"" in the
> /var/log/httpd/error_log.
This is good in general. If you really need directory traversal
(why?), read the docs on how to compile the suid wrapper. And once
again, READ THE DOCS **BEFORE** you ask for help.
> And if I set "$ssf_debug_server_settings_backend = 1" in the
> server_side_filters/config.php, and after I click "Options->Message Filters"
> on the web browser, the web page only display the following message:
>
> Unable to retrieve file from command
> "/var/www/html/webmail/plugins/server_settings_backend/squirrelmail_server_settings_suid_backend
> 'localhost' 'buxiaobing' 'get_file' '/home/buxiaobing/.mailfiter'
> '/var/local/squirrelmail/attach/xo4HqZ6WpSq6iUazfx1TLAmw3SEg6p9D'"
>
> Can't understand why will it retrieve the
> /var/local/squirrelmail/attach/xo4HqZ6WpSq6iUazfx1TLAmw3SEg6p9D file and
> this file is not exist.
>
>
> Bu Xiaobing
--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php
|