topic Re: WARNING: World writable directory /var/spool/mqueue in Operating System - HP-UX

WARNING: World writable directory /var/spool/mqueue

Manuales — Sat, 04 Aug 2007 23:59:59 GMT

hi .....
when i run the command sendmail, appears the message WARNING ...

AUSTRALIA:/->/usr/sbin/sendmail -v hola@patito.com.au
WARNING: World writable directory /var/spool/mqueue

WHy???

Re: WARNING: World writable directory /var/spool/mqueue

John Payne_2 — Sun, 05 Aug 2007 00:12:17 GMT

/var/spool/mqueue holds the mail and headers for your mail. It being world writable means there is possibility of mail being intercepted and altered...

John

Re: WARNING: World writable directory /var/spool/mqueue

Dennis Handly — Sun, 05 Aug 2007 00:12:56 GMT

Because it is a security hole, "World writable directory" is a bad thing.

What does "ll -d /var/spool/mqueue" show.

Re: WARNING: World writable directory /var/spool/mqueue

Manuales — Sun, 05 Aug 2007 00:13:50 GMT

Now is appearing the following:

syslog failed: Resource temporarily unavailable, syslog output to stderr
Sendmail: gethostbyaddr(90.30.29.2) failed: 1

syslog failed: Resource temporarily unavailable, syslog output to stderr
Sendmail: gethostbyaddr(12.23.23.45) failed: 1

WARNING: World writable directory /var/spool/mqueue

i restarted again the syslog but the message continues appearing .....

Re: WARNING: World writable directory /var/spool/mqueue

Manuales — Sun, 05 Aug 2007 00:15:54 GMT

It is appearing:

/var/adm/syslog->ll -d /var/spool/mqueue
drwxrwxrwx 2 root sys 68608 Aug 4 23:30 /var/spool/mqueue

could it be the permissions?

Re: WARNING: World writable directory /var/spool/mqueue

Dennis Handly — Sun, 05 Aug 2007 03:20:42 GMT

drwxrwxrwx 2 root sys /var/spool/mqueue
>could it be the permissions?

Of course. It shouldn't have "w" for the OTHER permission.

Re: WARNING: World writable directory /var/spool/mqueue

Dennis Handly — Sun, 05 Aug 2007 03:53:33 GMT

>It shouldn't have "w" for the OTHER permission.

Fix by:
# chmod o-w /var/spool/mqueue

There may be other permissions to remove?

Re: WARNING: World writable directory /var/spool/mqueue

Manuales — Sun, 05 Aug 2007 12:10:22 GMT

1.- first messgae
WARNING: World writable directory /var/spool/mqueue
i changed permissions: chmod 775 mqueue

2.- second message:
WARNING: Group writable directory /var/spool/mqueue
i changed permissions: chmod 755 mqueue

it fixed !!!!

now, only it is appearing:
syslog failed: Resource temporarily unavailable, syslog output to stderr
Sendmail: gethostbyaddr(100.10.10.80) failed: 1

syslog failed: Resource temporarily unavailable, syslog output to stderr
Sendmail: gethostbyaddr(19.16.13.7) failed: 1

what could be that????

thaks.

Re: WARNING: World writable directory /var/spool/mqueue

Dennis Handly — Mon, 06 Aug 2007 17:19:41 GMT

>There may be other permissions to remove?

On 11.23, the permissions are just: drwx------
So: # chmod u=rwx,g=,o= /var/spool/mqueue