🚀 go-pugleaf

On 27 Mar 1998 11:22:25 GMT, MetaBork <nico@metabork.ml.org> wrote:
	
>	I'm setting up a Linux box to handle a few dozen mail accounts.
>I'm going to use IMAP since most of the users will be travelling around the
>world, and want to be able to access their mail wherever they are.

>	It would be *nice* if they could access it without configuring a
>mail client, though. One possibility is through a web-based interface? Does
>that exist in the "free" world?[1]

Would they really have that much problem with the configuration?
They'd have to enter "yourserver@yourdomain.com" in a few blanks, but
not much else, and that would let them use whatever mail client they
wanted.

>	Since it seems that the answer is "no" so far (or "not good
>enough"), I'm considering setting up a limited shell for accessing a
>text-base mail client, such a pine or mutt.

echo "/usr/bin/pine" | chsh roystgnr
worked fine on my computer.  You log in, and pine starts; you exit
pine, and it logs you out.

>	Security is an issue, so I'm wondering if it's possible to use a
>customized login shell that would put the user in a chroot jail, and fire up
>the mail client automagically? Any advices?

Replace pine with a shell script containing whatever chroot type
commands you want, and you're set - you will need to make a link
between the real /var/spool/mail/* and whatever chroot tree you use.
Chown and chmod away anything (even their own configuration) that
you're worried about them changing.

But really, is that necessary?  Giving them a shell account isn't a
huge security hole; you'll find a thousand ISPs doing so regularly
with no trouble.  Get the mailing lists from BugTraq, rootshell, and
Red Hat just in case and you should be fine.
---
Roy Stogner