https://bugs.exim.org/show_bug.cgi?id=2132
Jan Ingvoldstad <frettled@???> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|WONTFIX |---
Status|RESOLVED |REOPENED
--- Comment #2 from Jan Ingvoldstad <frettled@???> ---
"Up to Exim version 4.72, the run time configuration file was also permitted to
be writeable by the Exim user and/or group. That has been changed in Exim 4.73
since it offered a simple privilege escalation for any attacker who managed to
compromise the Exim user account."
â¦
"In versions of Exim before 3.14, quoting was required in order to continue
lines,"
(
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_exim_run_time_configuration_file.html)
"Versions of Exim before 4.64 have a limited set of numbered variables, but
their names are compatible, so there is no problem with upgrading."
(
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-how_exim_receives_and_delivers_mail.html#SECID13)
And so on.
In general, you *appear* to put intro-time refs into current documentation.
Please either remove these other intro-time refs, or add this specific one.
--
You are receiving this mail because:
You are on the CC list for the bug.
