On 12/14/19 11:53 PM, Ralph Seichter wrote:
Of the three packages you mentioned, milter-regex (not regex-milter) is
the only one with a name that actually contains "milter". OpenDMARC
should never have user a user named milter in the first place, and in
the future it should use "opendmarc".
Besides, since nobody has claimed group/user "milter" before me, I think
this falls under first come, first serve.
I agree that milter-regex has the strongest claim to the username. All
I'm saying is that until opendmarc updates to GLEP81, changes its
username, and all of its old versions have been purged from the tree...
(a) we still have a dumb security vulnerability, in that these daemons
can modify each others' files; and
(b) you have to be careful not to do anything in acct-user/milter that
could break someone's opendmarc setup, because now reinstalling
acct-user/milter will reset all of the settings for its user (see
the mythtv thread from today about this).
