Default Postfix mysql map configuration is insecured

Started by become, August 13, 2017, 09:17:41 AM

Previous topic - Next topic

become

Any user which have shell access can show postfix password from mysql-virtual_mailbox_maps.cf
This is totally insecured

If this is CWP Standard then this should be fixed

Jae

Quote from: become on August 13, 2017, 09:17:41 AM
Any user which have shell access can show postfix password from mysql-virtual_mailbox_maps.cf
This is totally insecured

If this is CWP Standard then this should be fixed

OMG you right, any user got root password also can do that....