Re: [exim-dev] Candidate patches for privilege escalation

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Phil Pennock
Ημερομηνία:  
Προς: David Woodhouse
Υ/ο: exim-dev
Αντικείμενο: Re: [exim-dev] Candidate patches for privilege escalation
On 2010-12-14 at 08:06 +0000, David Woodhouse wrote:
> On Mon, 2010-12-13 at 18:01 -0500, Phil Pennock wrote:
> >
> > One of the installation modes for mailscanner is to make the spool
> > directory be a macro:
> >
> > http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:exim:installation
>
> Wait a minute, wasn't that broken even *before* we started to further
> restrict the use of -C and -D?


No, because mailscanner runs as the Exim user, so is therefore trusted.