Re: dot-qmail security

[D. J. Bernstein]

Matthias Pigulla writes:
> So what about introducing a new qmail feature that allows to control the
> use of pipe commands?

This feature was introduced in qmail 0.73. One way to set it up is

    drwxr-x---  root joegroup  /home/joe
    -rwxrw----  root joegroup  /home/joe/.qmail
    -rw-r-----  root joegroup  /home/joe/.qmail-direct

with joe-direct in .qmail and ./Mailbox in .qmail-direct. Then Joe can
change .qmail, but the x bit on .qmail will stop anything other than
forwarding.

---Dan