[imp] Writing to user's .forward file from IMP

[Rick Romero]

What if you created an EMPTY .forward file in each users directory 
upon user creation owned by user (user) and group nobody, with 
g+w access (ok, so I never stop to think about the damn 
numbers..)?

Then Apache could write to this file as needed..  You'd just have to 
make sure you empty the file then append to it, instead of deleting 
the file and rewriting it... 

You do have the 'hole' of someone being a member of 'nobody', and 
forwarding other users mail..  It would be more secure if you don't 
allow shell access.

Rick

On 19 Jul 2001, at 15:49, Christopher Crowley wrote:

> > A better approach might be to somehow use IMP for authentication
> > through IMAP (is this possible?) and then maybe a perl script to edit
> those
> > files.
> >
> 
> This seems to be the alternative. However, the perl / php script would be
> run as nobody, or whatever user that the webserver is run as.  I would need
> to give nobody some added permissions to write to all user's home
> directories. I don't want to do that on the webserver.
> 
> The spin on this scheme that I considered is to write the information to a
> file as nobody, then let a priveledged user account cron job do some more
> sanity checking on the stored info, then write the files, and invoke the
> vacation program as the user.
> 
> 
> 
> 
> -- 
> IMP mailing list: http://horde.org/imp/
> Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
> 


Sincerely,
Rick Romero

IT Manager
Valeo, Inc.
rick@valeoinc.com
262-695-4841