On 25/01/2022 21:05, Michael Steigman via Exim-users wrote:
> With OpenShift, however, all containers are run by a user with an arbitrary ID. That ID is linked to the project you are running the image in. It’s usually something like 1001360000. OpenShift adds the user to the image and makes it a member of the group root before starting up a container with the image.
I'm not a containers user myself, but Exim generally runs with the
assumption it needs to become anybody - for two reasons: opening
priv ports (25 is usually a restricted one) and delivery
into user's mailboxes. Therefore, suid root.
There's some notes in the docs on running in alternate modes,
(but I've never tried).
--
Cheers,
Jeremy
