[Dovecot] Problem with created ~/mail directory

[Timo Sirainen]

On Fri, 2010-02-05 at 11:20 -0600, Chris Adams wrote:
> If a user doesn't have a ~/mail directory and logs in, the directory is
> created for them.  However, it is created with insecure permissions,
> 0770 (full group access).
> 
> The problem is this bit in src/lib-storage/index/mbox/mbox-storage.c:
> 
>    #define CREATE_MODE 0770 /* umask() should limit it more */

Fixed: http://hg.dovecot.org/dovecot-1.2/rev/99caf87fb3ce

Also v2.0 handles this by copying the parent directory's permissions.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20100206/296d0073/attachment.bin