Dominik Ruf wrote:
> * Wakko Warner <wakko@???> [2005-02-18 00:34]:
> > Debian-exim user in the config scripts (IMO, this is totally uncalled for.
> > What happened to simply exim or mail? I chose to use mail myself).
>
> The question about the account name "mail" for the debian exim package
> is not new. E.g. have a look at
> http://www.mail-archive.com/debian-user@lists.debian.org/msg119233.html
>
> | "mail" is also the account that owns the mail spool, hence all MUAs
> | run sgid mail per policy. Running the MTA as mail as well would mean
> | that the MTA's queue would have to belong to mail as well, giving MUAs
> | read access to the MTA's queue, which is a significant security risk.
> |
> | This is the reason why we decided to run exim4 with a non-"mail"
> | account.
>
> But maybe you know what you're doing on your systems and this
> doesn't apply for your setup.
The mail systems I run fall under 1) they're used only for my self or 2) all
the users are virtual, have no system login and the mail files are all owned
by the same user.
I don't intend on running a publicly accessible shell with mail support. So
I think I'll be fine with the way it's setup.
--
Lab tests show that use of micro$oft causes cancer in lab animals
