Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!usc!apple!agate!ucbvax!C.CHEM.UPENN.EDU!YATES
From: YATES@C.CHEM.UPENN.EDU ("YATES, JOHN H.")
Newsgroups: comp.sys.sgi
Subject: /usr/mail/username protections
Message-ID: <9103270345.AA07265@remote.dccs.upenn.edu>
Date: 27 Mar 91 03:43:00 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 15

I now have umask 077 in /etc/stdcshrc so that mbox in the user's dir
gets no privs for group, but /usr/mail/username files get g:rw !!
Why is this and how can I prevent any group privs?

I also find some length 0 /usr/mail/username files out there, but
when I read my newmail and quit, mine gets deleted. Do I assume that
adduser creates a zero sized file for the user, but when it gets used
it gets deleted? If I can coerce the file to remain even if zero length,
at least I can forever put the "correct" protections on existing ones.

I alias mail to Mail, set mail = (60 /usr/mail/$LOGNAME), and in .mailrc
set ask askcc asksub

Thanks, John
yates@a.chem.upenn.edu