On Wed, 23 Dec 1998, Mate Wierdl wrote:
> You simply have to follow the var-qmail rules, to guarantee
> compatibility. See http://pobox.com/~djb/qmail/dist.html.
>
> The operative word is "simply". Sooooo: how do I find the 40
> arguments to idedit on my RH Linux (elf, littel-endian)---or any other
> system.
The whole idea that you have to use a binary editor is crazy in the first
place.
The whole idea that reading the uids out of /var/qmail/control/ids will
cause "lots of bugs" is equally crazy. Gee, doesn't qmail *already* read
configuration info out of control files, and manage to do so securely?
Surely a programmer as esteemed as Dan could manage that. If someone is
able to change /var/qmail/control/ids, your box is already completely
owned and most likely fdisked by that point (by the intruder).
There is *ZERO* change in security between having hard coded uids versus a
/var/qmail/control/ids file.
Since having control/ids would be a) a *ZERO* change in security, and
b) very easy to implement
then:
Dan is being a) lazy or b) headstrong, obstinate, mulish, sulky,
dogmatic and illogical.
Sounds like Dan is *promoting* "Frivolous Incompatibilities" with the rest
of the Unix universe.
Dax Kelson
Internet Connect, Inc.
