Re: [webmin-l] Fetchmail Module - No Mailservers Have Been Specified

[Jason S. <jas...@gm...>]

The problem has been reported.

I've also upgraded perl in the production environment to version 5.8.7
and the problem's been solved.

(I also had to go & change owership on all of the previously created
~/.usermin directories & their subdirectories because they had all
been created by the root user and Usermin wasn't able to modify them,
since everything's being done by the correct user now.)

All in all, though, issue solved. Hopefully Apple acts on my bug report.

On 24 Oct 2005 08:51:59 +1000, Jamie Cameron <jca...@we...> wrote:
> Hi Jason,
> I agree, this is quite a serious Perl bug.. It would break many
> functions in Webmin, and open up a lot of security holes! Usermin would
> be even worse, all user operations (even in modules like the file
> manager) would be done as root!
>
> You might want to report this to Apple ..
>
>  - Jamie
>
> On Mon, 2005-10-24 at 05:49, Jason Self wrote:
> > I agree. I upgraded the test environment of OS X to version 10.4.2
> > (which includes a newer version of Perl among other stuff) and the
> > cron jobs are created as the correct user.
> >
> > What's on the machine is the version of Perl shipped with Panther.
> > This will affect, then, everyone using Webmin/Usermin with OS X 10.3.9
> > or earlier. I can't yet upgrade the production environment to anything
> > later than 10.3.9, because there are some other outstanding issues
> > with 10.4 and later versions (which I'm hoping will be addressed in
> > 10.4.3 but that's a separate issue.)
> >
> > I guess, in the meantime, I will look into upgrading Perl on the copy
> > of OS X that I have.
> >
> > Thanks for your time & assistance.
> >
> > On 23 Oct 2005 21:55:54 +1000, Jamie Cameron <jca...@we...> wrot=
e:
> > > Hi Jason,
> > >
> > > I checked out your system, and I think that the cause is not a Usermi=
n
> > > bug at all. Rather, Perl is behaving very oddly .. it is completely
> > > ignoring any code to switch from root to another user! For example, t=
he
> > > following command should print 502 (the UID that it switches to), but
> > > does not :
> > >
> > > perl -e '$< =3D 502; print $<,"\n"'
> > >
> > > I am not an OSX expert so I can't speculate why this would be the cas=
e,
> > > but if there is an update to Perl available, I would recommend
> > > installing it.
> > >
> > >  - Jamie
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by the JBoss Inc.
> > Get Certified Today * Register for a JBoss Training Course
> > Free Certification Exam for All Training Attendees Through End of 2005
> > Visit http://www.jboss.com/services/certification for more information
> > -
> > Forwarded by the Webmin mailing list at web...@li...=
.net
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by the JBoss Inc.
> Get Certified Today * Register for a JBoss Training Course
> Free Certification Exam for All Training Attendees Through End of 2005
> Visit http://www.jboss.com/services/certification for more information
> -
> Forwarded by the Webmin mailing list at web...@li....n=
et
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>