- world accessible suid root in cgi-bin?!

Changed files:
    courier.spec -> 1.122

diff --git a/courier.spec b/courier.spec
index c1f0606df28780813a277bbe65582deef7a16535..c1566d453b6f895d3be21279389a8f9822a29e7f 100644 (file)
--- a/courier.spec
+++ b/courier.spec
@@ -817,6 +817,7 @@ fi
 
 %files webadmin
 %defattr(644,root,root,755)
+# suid root to cgi-bin??? and it's not secured by apache config!
 %attr(4755,root,root) %{_cgibindir}/webadmin
 %attr(700,daemon,daemon) %dir %{_sysconfdir}/webadmin
 %attr(700,daemon,daemon) %dir %{_sysconfdir}/webadmin/added