Squirrel mail has possibly has it's ownership and permissions changed accidentally through a sym link. Can someone let me know who the correct owning user and group should be for squirrel please.
That answered my question well but hasn't cured the problem, which must mean my question is wrong! If i access squirrel mail through myip/webmail it works fine. But if run it through symlink on a website it reports this error: Error opening ../config/default_pref Could not create initial preference file! /var/lib/squirrelmail/data/ should be writable by user web24 Please contact your system administrator and report this error. Recently I changed that site from modphp to fastcgi with suexec. I have removed the suexec option and squirrel mail does now work through it. Are there any implications using fastcgi without suexec?
It renders the benefits of fastcgi vs. mod_php useless and is lesss ecure as all scripts will be run under the same user, so that it might be possible that one user accesses the scripts and files of other users. For that reason, ispconfig is not creating webmail syminks in the website directories. They simply dont work in many situations.
Understood, hence when suexec was enforced the site and proceeding symlinks were being run under web24 user. So if squirrel mail were accessed from a symlink of a site without suexec running, a potential harmful script could be included damaging both squirrel and the originating site? If squirrel is accessed directly through the ip, what user is it ran under then?