Re: [Exim] never_users=root

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Willie Viljoen
Datum:  
To: exim-users
Betreff: Re: [Exim] never_users=root
Exim can really use any user you like, as long as that user is not on the
never_users list. However, compiling it to run as root is a *REALLY* stupid
idea. If there is a security hole in the code, your system can be fully
compromised by a remote atacker.

Virtually all systems have a user mail (UID 8) and a group mail (GID 12) for
handling this. Compile with EXIM_USER=mail and EXIM_GROUP=mail and then set
never_users = root in your configuration file.

As long as permissions on your spool directory and /var/mail are correctly
set up, Exim does not ever need to run as root.

Will

On Friday 21 February 2003 15:23, Konrad Michels wrote:
> I may be mistaken, but I'm sure you're supposed to set the compile-time
> option of EXIM_USER= to something OTHER than root. At least this is the
> way I've always compiled exim! Assuming you have a user "exim" on your
> system, set the EXIM_USER= to "exim", recompile and you should be able
> to uncomment "never_user" so that it works properly.
>
> Later
> Konrad
>
> On Fri, 2003-02-21 at 13:23, Michael Daly wrote:
> > Hi,
> >
> > I am using exim 4.12 on suse linux 8.0 and can not get it working with
> > never_users=root defined (this worked for me with exim3.xx). The spool
> > and log files all have set to user root and group root. I compiled the
> > source code with EXIM_USER=root. With never_users commented out exim
> > works fine but I get the impression it should be included.
> >
> > Michael.
> >
> > ######################################################################
> > 2003-02-21 09:25:29 18m9QZ-0002OA-00 <= root@??? U=root
> > P=local S=311
> > 2003-02-21 09:25:29 18m9QZ-0002OA-00 User 0 set for remote_smtp
> > transport is on the never_users list
> > 2003-02-21 09:25:29 18m9QZ-0002OA-00 == yorksmdaly@??? R=dnslookup
> > T=remote_smtp defer (-29): User 0 set for remote_smtp transport is on
> > the never_users list
> > ######################################################################
> >
> >
> >
> > --
> >
> > ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
> > details at http://www.exim.org/ ##
>
> --
> ***********************************************************************
> *
> * Konrad Michels
> * System Administrator
> * Surfkitchen Limited
> * Abbey House
> * 1650 Arlington Business Park
> * Theale
> * RG7 4SA
> * United Kingdom
> * Tel: +44 118 929 8079
> *
> ***********************************************************************
>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
> details at http://www.exim.org/ ##


--
Willie Viljoen
Freelance IT Consultant

214 Paul Kruger Avenue, Universitas
Bloemfontein
9321
South Africa

+27 51 522 15 60
+27 51 522 44 36 (after hours)
+27 82 404 03 27 (mobile)

will@???