Axel Rau wrote:
>
> Am 14.02.2011 um 19:16 schrieb Phil Pennock:
>
>>
>> Will you settle for 4.76? :)
> OK.
> ...
>
>> although I do wonder about what happens with DB connections
>> happening from multiple users, depending on which user Exim was running
>> as when it opened the connection?
>
> You mean a multi-users system, where exim is used for submission?
> If exim is not setuid root/exim_user then my code won't work
> in that situation. It requires either setuid executable or an outgoing
> relay,
> which would do the job. Same is true with other DB-lookups.
> All my experience is based on networked clients which connect to a daemon
> (usually IMAP with submission capability) on a server which has no user
> accounts on it.
>
> Axel
> ---
> [email protected] PGP-Key:29E99DD6 +49 151 2300 9283 computing @ chaos
> claudius
>
>
>

Axel, all...

Coming late to a discussion not of my making .. worse, probably forgetting 
earlier discussions...

...but one has never needed setuid root <nor anything else special> to write 
logs or, indeed  essentially *anything* into a DB with *unpatched* Exim 4.4X 
onward..

All that is needed is a valid set of DB access credentials and the use of 
'INSERT',  'UPDATE', etc  (for SQL, anyway...) from anywhere in acl's or 
router/transports. And that's just the built-in route.

Externals can be called as well.

What is it that is seen to be in need of patched/new code?

And should the offered patch be the one thaqt makes the cut if it *requires* 
setuid?

Bill Hacker



-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-dev Exim details 
at http://www.exim.org/ ##

Reply via email to