On Fri, 8 May 2015 10:50, stakanov wrote:

Hello everybody.

I have got a strange message from sec-check and would like somebody to explain me what could be the reason.

I had an old, unused user on my system. It was called caleidoscope. It did not receive email had kmail not activated. I erased it.

I created recently due to a problem with kontact (did not start anymore https://bugs.kde.org/show_bug.cgi?id=340867 ) a new user mercurio.For being able to use Kontact again, I created all but mail and address list by hand. I created an all new set of filters. Now it seamed that Kontact was healthy again.

Now I activated my mail in mercurio, imported the former mail from my mail personality. NONE of these things had anything to do with caleidoscope. No links, no shared folder. Nothing.

I am running seccheck every day. Normally I have always logical output. But this time I was literally baffled by the following output:

+ user caleidoscope mailbox is owned by mercurio.

WTF? a) I do not even have caleidoscope on my system any more.

b) I did not own anything by intentional action.

c) mecurio does not receive root mail, so that cannot be the reason, and I did not import anything from caleidoscope before that.

d) I do not find any reference to the "mailbox" of caleidoscope within mercurio.

e) If there is, I want to erase that account called mailbox (of caleidoscope) that was "owned". It should not be on the system. How can I find it?

Question: does anybody has a clue what might have happened here? Could the mariadb be compromised by something? How can I check the list of all other users that have access to the mailboxes of the user mercurio?

That "Mailbox", could it be the one in /var/spool/mail/ ? There could be a old file named "caleidoscope", and due to the (presumed) fact that the new user "mercurio" has the same uid as the old (and deleted) user "caleidoscope", that file is now owned by user "mercurio". Due to the difference between the uid, that now points to "mercurio" and the file name "caleidoscope", the program "sec-check" give you the message about shown above. Is there is a file, "ls -l" should show it owned by "mercurio" ls -l /var/spool/mail/caleidoscope If size is Zero (0): simply delete it. Else: use less and look into it, if wanted, use cat /var/spool/mail/caleidoscope >>/var/spool/mail/mercurio And remove /var/spool/mail/caleidoscope afterwards, now the user "mercurio" has "New Mail". MariaDB is another beast, not my speciality, sorry. - Yamaban. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org