List of files with bad permissions

There are a number of direcotry's and files that are managed with the permission of 777 this can not happen This is a Huge area that needs to be fixed. If you know alot about file permissions and or anything about correct permissions for vmail and other services please contact me asap thanks for your time

List of Directory that are no good in current implant of Zpanel on Servers

/etc/zpanel/
/var/zpanel/
/var/zpanel/vmail
/var/zpanel/logs/bind/bind.log
/etc/zpanel/configs/dovecot2/dovecot.conf
/etc/zpanel/configs/postfix/conf/dovecot-sql.conf
/etc/zpanel/configs/postfix/conf/dovecot-trash.conf
/etc/mysql/my.cnf
/etc/zpanel/configs/postfix/conf/mysql_virtual_alias_maps.cf
/etc/zpanel/configs/postfix/conf/mysql_virtual_mailbox_limit_maps.cf
/etc/zpanel/configs/postfix/conf/mysql_virtual_mailbox_maps.cf
/etc/zpanel/configs/postfix/conf/mysql_virtual_transport.cf

Other possible Security issues

ZPANEL ZSUDO:
====================================
# Must be owned by root with 4777 permissions, or zsudo will not work!
cc -o /etc/zpanel/panel/bin/zsudo /etc/zpanel/configs/bin/zsudo.c
sudo chown root /etc/zpanel/panel/bin/zsudo
chmod +s /etc/zpanel/panel/bin/zsudo

Over writing certian files like apache2.conf is not a good idea there needs to be a better implementation for this and all files that are being altered.

There is no ssl so anyone can see what you are typing when if you are prone too a man in the middle attack.

IMPORANT

All of this information was gathered by looking at the Community based installer scripts
So there is nothing that can be done besides make a better debian package