Re: Patch to run as "nullmail"

Dan Stromberg <[email protected]> wrote:
> > > Are there any problems with this configuration?
> > 
> > Running as that user is fine, but it shouldn't require the addition of any
> > code to nullmailer.  This can be done in the shellscript that runs
> > nullmailer using any tool you like -- the djb-esque approach is
> > `setuidgid` or similar.
> 
> Call me strange, but I believe that although this functionality isn't needed
> by advanced users, it would likely be a big benefit to users who don't
> realize they should be decreasing privilege as an extra step.

Doesn't it seem silly/strange to add extra application-specific code (which
then needs to be documented, maintained, tested, and debugged) to add zero
extra functionality?

Adding extra code also increases the chance of a security problem, so it's
counter-productive.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                       <[email protected]>
GPL'ed software available at:               http://pyropus.ca/software/
-----------------------------------------------------------------------