From: Paul L. <pa...@sq...> - 2013-06-24 23:14:30
|
> I think the problem with setgroups(0, NULL): Operation not permitted has > been resolved. If you don't say *how* -- explain carefully what you changed, what your current settings are, then you leave us to guess. This is frustrating and you are less likely to receive any help this way. > At the first time I set > 'SUID_LOCATION' => array('VALUE' => > '/var/www/html/webmail/plugins/server_settings_backend/suid_backend/squirrelmail_server_settings_suid_backend'), > > I find in the /var/www/html/webmail/plugins/server_settings_backend also has > a squirrelmail_server_settings_suid_backend, and the file permission is > -rwsr-xr-x. > > So I change the SUID_LOCATION value to > /var/www/html/webmail/plugins/server_settings_backend/squirrelmail_server_settings_suid_backend The only examples I can find point to the server_settings_backend directory. The copy of the suid_wrapper in the suid_backend directory shouldn't be used in your configuration. (I believe this is your oversight, unless you can point out where there was a misleading example.) > But get another error "Remote file name cannot contain "/"" in the > /var/log/httpd/error_log. This is good in general. If you really need directory traversal (why?), read the docs on how to compile the suid wrapper. And once again, READ THE DOCS **BEFORE** you ask for help. > And if I set "$ssf_debug_server_settings_backend = 1" in the > server_side_filters/config.php, and after I click "Options->Message Filters" > on the web browser, the web page only display the following message: > > Unable to retrieve file from command > "/var/www/html/webmail/plugins/server_settings_backend/squirrelmail_server_settings_suid_backend > 'localhost' 'buxiaobing' 'get_file' '/home/buxiaobing/.mailfiter' > '/var/local/squirrelmail/attach/xo4HqZ6WpSq6iUazfx1TLAmw3SEg6p9D'" > > Can't understand why will it retrieve the > /var/local/squirrelmail/attach/xo4HqZ6WpSq6iUazfx1TLAmw3SEg6p9D file and > this file is not exist. > > > Bu Xiaobing -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php |