On Tue, Apr 03, 2007 at 11:50:44AM +0200, Marco d'Itri wrote: > Too bad. Mostly everybody disagrees, restricting -f is a stupid waste of > time since users can inject mail in other ways.
adding a bit more of security which cost almost nothing doesn't sound bad nor stupid to me. I guess there's been a wide poll Having such helper programs like vacation requiring higher priviledges than needed does sound bad, and turned out as a waste of time. Just wondering why sendmail designer have been so stupid. > > > So, enabling -f for normal user by default is *the broken behaviour* IMO, > > as it allows to spam/spoof too easily. > Welcome to the Internet. Thx, been here since quite long. Regardless, what's the objections to merge in the patch? why not leaving to end user the decision? why Debian's vacation shouldn't work also for the few stupid Debian users, that just happen to disagree with 'mostly everybody' (whathever that means, either just you or every sysadmin) on that? thanks -- paolo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
