Re: Bug&patch: cyrus-imapd-2.0.16 not setting process gids

[Amos Gouaux]

>>>>> On Mon, 10 Sep 2001 12:29:17 -0400,
>>>>> Christopher Wong <[EMAIL PROTECTED]> (cw) writes:

cw> The "shadow" method gives "shadow" privileges to a Cyrus daemon. The 
cw> pwcheck method requires root privilege for the pwcheck daemon. I would 
cw> suggest that there is a qualitative difference between the mere ability 
cw> to read /etc/shadow and full root privileges.

True, but the cyrus user is potentially more exposed to the outside
environment than pwcheck/saslauthd.  These daemons are after all
listening on a UNIX domain socket, not an INET socket.

-- 
Amos