On Fri, Jan 19, 2007 at 07:03:01AM -0500, Sam Varshavchik wrote:
> In as many years as I can remember, nobody cared 
> about running anything, courier-imap, or courier-authlib, in chroot.

For Linux maybe; but OpenBSD runs every daemon that it can in a chroot
environment.

Even on Linux systems, I often see 'named' running in a chroot. That's
probably a sensible idea; ISC BIND is an extremely big and complex beast.

OTOH, if you said that running as a non-root user is more important, I'd
agree. Besides, to run a big package in a chroot environment, you'll need so
many libraries and other bits that if anyone breaks in they'll have a pretty
functional system anyway.

Regards,

Brian.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to