Re: Patch to run as "nullmail"

--=-Mk0xwsOBhMwQ3QtIehBP
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2005-05-31 at 12:35 -0600, Charles Cazabon wrote:
> Dan Stromberg <[email protected]> wrote:
> > > > Are there any problems with this configuration?
> > >=20
> > > Running as that user is fine, but it shouldn't require the addition o=
f any
> > > code to nullmailer.  This can be done in the shellscript that runs
> > > nullmailer using any tool you like -- the djb-esque approach is
> > > `setuidgid` or similar.
> >=20
> > Call me strange, but I believe that although this functionality isn't n=
eeded
> > by advanced users, it would likely be a big benefit to users who don't
> > realize they should be decreasing privilege as an extra step.
>=20
> Doesn't it seem silly/strange to add extra application-specific code (whi=
ch
> then needs to be documented, maintained, tested, and debugged) to add zer=
o
> extra functionality?
>=20
> Adding extra code also increases the chance of a security problem, so it'=
s
> counter-productive.

This is the sort of attitude that makes people feel that linux and unix
are "only for experts".


--=-Mk0xwsOBhMwQ3QtIehBP
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQBCnLyvo0feVm00f/8RAkNnAJ4+V8PJJMEJj4WzU3kU3jNCFRsCFACeMAI+
XVWuMA3Vb2ILTanfN2ao3+w=
=qhnz
-----END PGP SIGNATURE-----

--=-Mk0xwsOBhMwQ3QtIehBP--