RE: [Exim] Solaris 2.6, Perl 5.6.1, exim 3.22 - Can't open p…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Gustav H Meyer
Date:  
À: Sheldon Hearn
CC: Philip Hazel, exim-users
Sujet: RE: [Exim] Solaris 2.6, Perl 5.6.1, exim 3.22 - Can't open pipe
>> Ok guys, thanks for all the help you guys are great. To make a
>> long story short. I recompiled exim with EXIM_UID=0 and EXIM_GID=1
>> and now all is working. I guess that is what you mean by "Make exim
>> setuid root"?
>
>Not really. :-)


Oops. See I'm learning everyday. :)

>Now Exim will always run as root. If you're concerned about security
>exposure, this isn't ideal.
>
>You probably want to configure Exim to run as a non-priveleged user,
>by changing the configure file, e.g.
>
>    exim_user = exim
>    exim_group = mail

>
>Then, you should make the exim binary setuid root, e.g.
>
>    chmod u+s /usr/local/sbin/exim

>
>This way, any user will execute Exim with root privelege until
>Exim sees fit to drop privelege and become user exim. You could get
>more paranoid than this, but not without sacrificing the ability to
>deliver into mailboxes that aren't group-writable to the exim_group.


Makes sense, thanks again.

Regards,
Gustav