Path: ...!3.eu.feeder.erje.net!feeder.erje.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: none <hzcnjkx656@tormails.com>
Newsgroups: comp.mail.sendmail
Subject: Re: key / crt permissions constantly
Date: Thu, 1 Aug 2024 11:32:39 +0200
Organization: A noiseless patient Spider
Lines: 21
Message-ID: <v8fknp$23nhb$1@dont-email.me>
References: <v87se5$eupk$1@dont-email.me> <v8fa3i$k8l$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 01 Aug 2024 11:32:41 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="f23e8d4e03520b2c935b88295b7994a7";
	logging-data="2219563"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/Dp+dukBYIITNn1rnB/0bNCj8tnvfdsXxA5XE1hRjo+Q=="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:NUjuJzCQY0ioDpjYzCjdBF1IoR4=
In-Reply-To: <v8fa3i$k8l$1@news.misty.com>
Content-Language: en-GB
Bytes: 1873


>> file /home/acme/test.cer unsafe: Permission denied
> 
> Which command triggers this error?
> Please show the full command and the full logfile entry.
> What are the permission/owner/group of the involved directories
> ( / /home /home/acme )?

I think I should do this again with an el9 version, I don't want to 
waste anyone's time on details with something old.

I was more thinking about a general topic where users can just turn 
these checks of and have sendmail just trust the groups / acls that it 
has been given.
I don't think I have seen these checks with eg apache. This is more like 
a design question, wether or not this is the responsibility of the 
application or user.
Even if you have o+w files, if they are in a parent folder with o-rwx it 
does not really matter.