Re: [exim] Re: SMTP Authentication out of the box

Top Page
Delete this message
Reply to this message
Author: Marc Haber
Date:  
To: Exim-Users (E-mail)
Subject: Re: [exim] Re: SMTP Authentication out of the box
On Fri, 17 Dec 2004 10:00:33 -0600, Tommy Butler <tommy@???>
wrote:
>What's wrong with:
>
>usermod -G shadow Debian-exim
>    -or if exim runs under user "exim"-
>usermod -G shadow exim

>
>Just add exim user to the shadow group.


/etc/shadow contains one of the most valuable databases in today's
UNIX systems: The database of User Passwords, including root's.

Is it really a good idea to allow read access to that database to an
exposed daemon? Nosireebob, that one won't happen in Debian's exim4
packages.

Greetings
Marc

-- 
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber         |   " Questions are the         | Mailadresse im Header
Mannheim, Germany  |     Beginning of Wisdom "     | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834