I'm a member of the Capital Area Central Texas Unix Society in Austin, TX,
(CACTUS.org) and am the system admin for our organization's Linux box.  Most
of our members are professional Unix programmers and system administrators. 
One of our members is considering the installation of Sqwebmail on the box,
but, being wisely conservative re. security, is understandably rather leary
of installing _any_ kind of a setuid CGI program on the system.  My
experience with Courier and Courier components (which I use for my customers
on my business server) has been 100% when it comes to security, but I'm not
able to address this person's concerns in more general terms.

Can Sam or someone summarize the security measures and the level of code
scrutiny that has gone into the design of sqwebmail in a way that might
reassure a group of security conscious system admins whose minds go into
red-alert mode when they see the terms "CGI" and "suid" in the same
sentence?

-- 
Lindsay Haisley       | "Everything works    |     PGP public key
FMP Computer Services |       if you let it" |      available at
512-259-1190          |    (The Roadie)      | <http://www.fmp.com/pubkeys>
http://www.fmp.com    |                      |


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to