Re: [exim-dev] Candidate patches for privilege escalation

On 2010-12-12 Phil Pennock <exim-dev@???> wrote:
> On 2010-12-12 at 03:10 +0000, David Woodhouse wrote:
[...]
> > - Kill ALT_CONFIG_ROOT_ONLY as discussed, so only root can specify
> > arbitrary files on the command line with the -C option. If the Exim
> > user uses -C, or uses the -D option to set macros, then root privs
> > will be dropped.

> But if the Exim daemon is started as root with -C/-D, isn't this how the
> changes are propagated into delivery instances, by having Exim re-exec
> itself with the -MC* internal options and *also* passing along the -C/-D
> options? Done with child_exec_exim().

> How heavily has this change been tested in conjunction with doing actual
> deliveries when the daemon was started as root with -C/-D ?

> Eg, are there setups which use things like -DTLS and optionally enable
> features this way from the cmdline with init-script config, rather than
> direct Exim config?
[...]

This seems to be the usual way to combine mailscanner with exim.

cu andreas