On Tue, 4 Aug 2009, Timo Sirainen wrote:
On Tue, 2009-08-04 at 19:53 -0400, Rob Mangiafico wrote:
What permissions does /var/spool/mail/john have? I guess mail group has read permissions? Just removing that should fix the error.
-rw-rw---- 1 john mail 5676767 Aug 4 19:50 /var/spool/mail/john
Those are the default permissions that sendmail uses I believe. Not sure if removing "mail" group r/w would have any other impact for sendmail/procmail? Thanks for taking the time to help.
It depends on your setup, but usually mail group shouldn't need read or write access to users' mails. Seems like a security risk to me in any case.
I agree. I removed the "rw" for the mail group for individual mbox mailboxes and no adverse effects from what I can tell. Thanks.
Rob