https://bugs.exim.org/show_bug.cgi?id=1060
sf@??? changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |sf@???
--- Comment #1 from sf@??? ---
I think file descriptor passing should be the default for unix domain sockets.
The virus scanner is a component that is routinely exposed to malicious
content. The admin should sandbox it as far as possible and not give it extra
privileges by adding it to a group. In particular, since the group used by exim
for storing the spool files may be used for other purposes, too (like access to
smtp password files).
--
You are receiving this mail because:
You are on the CC list for the bug.
