The mailing list for listmasters using Sympa

[Olivier Salaun <address@concealed>]

Hi Malcom,

Malcolm wrote:
> 
> I noticed (or rather the security check script noticed) that sympa
> creates world read/writable files for each user that bounces a message
> (under ~sympa/bounce/listname/emailaddress). Is there any reason for
> them to be world writable (none of the other files sympa creates are
> world writable)?

You're right, bounced.pl does chmod(0777) on bouncing messages. This is not
needed because the umsask was set earlier. We have changed this in 
development version.

Thanks for reporting this.

--
Olivier Salaün
Comité Réseau des Universités