On Jun 8, 2019, at 6:55 AM, Ralph Corderoy <[email protected]> wrote:
> 
> Hi Bakul,
> 
>> I can not think of one reason why inc shoud be set{g,u}id'ed.
> 
> I often switch to another user to see if they've any new email they'd
> like to know about.  All I really need for that is setuid inc that scans
> the From and Subject fields.

Probably safer to use "sudo -u another inc" or whatever mh command?

> And I think Ken's point was about all nmh, as was my reply.

Hmm... Same response:-)
Privilege escalation should be done externally.



-- 
nmh-workers
https://lists.nongnu.org/mailman/listinfo/nmh-workers

Reply via email to