From: Mike Frysinger <vapier@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] VPopmail - SUID vchkpw
Date: Wed, 20 Jul 2005 20:32:35 -0400 [thread overview]
Message-ID: <200507202032.35624.vapier@gentoo.org> (raw)
In-Reply-To: <20050720070457.GC11608@curie-int.orbis-terrarum.net>
On Wednesday 20 July 2005 03:04 am, Robin H. Johnson wrote:
> On Wed, Jul 20, 2005 at 05:37:19AM +0000, Casey Allen Shobe wrote:
> > I can confirm that - bincimap and qmail-pop3d run as root, so the
> > setuid bit is not necessary. I believe this is also the case for
> > dovecot 1.0 beta releases, though there are no ebuilds for them so
> > I haven't yet tested (<1.0 releases use libvpopmail directly
> > instead of the checkpassword interface). However it is necessary
> > for any server running as a non-root user, i.e. qmail-smtpd.
>
> For common operation of qmail-smtpd, vchkpw is NOT required. SMTP AUTH
> is the only reason qmail-smtpd would call vchkpw.
how is that not common operation ? SMTP AUTH is a pretty critical feature
imho
-mike
--
gentoo-dev@gentoo.org mailing list
next prev parent reply other threads:[~2005-07-21 0:34 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-20 1:32 [gentoo-dev] Abuse by gentoo developer Casey Allen Shobe
2005-07-20 1:41 ` Mauricio Lima PIlla
2005-07-20 1:42 ` Mike Frysinger
2005-07-20 2:21 ` Nathan L. Adams
2005-07-20 2:20 ` Mike Frysinger
2005-07-20 2:35 ` Allen Parker
2005-07-20 2:17 ` Daniel Goller
2005-07-20 5:43 ` Casey Allen Shobe
2005-07-20 2:43 ` Robin H. Johnson
2005-07-20 5:37 ` [gentoo-dev] VPopmail - SUID vchkpw Casey Allen Shobe
2005-07-20 5:43 ` [gentoo-dev] QA feedback Mike Frysinger
2005-07-20 13:47 ` Chris Gianelloni
2005-07-23 8:06 ` Stuart Longland
2005-07-20 7:04 ` [gentoo-dev] VPopmail - SUID vchkpw Robin H. Johnson
2005-07-20 10:13 ` [gentoo-dev] " Duncan
2005-07-21 0:28 ` [gentoo-dev] " Casey Allen Shobe
2005-07-21 2:59 ` Robin H. Johnson
2005-07-21 0:32 ` Mike Frysinger [this message]
2005-07-21 5:15 ` Casey Allen Shobe
2005-07-22 8:45 ` [gentoo-dev] " Duncan
2005-07-20 9:54 ` [gentoo-dev] Re: Abuse by gentoo developer Duncan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200507202032.35624.vapier@gentoo.org \
--to=vapier@gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox