I have never understood this one.  The obvious answer is to put code
into qmail-start to read the password file for the proper ids and pass
them on to the programs it starts.  No config files, standard Unix
functions, no problems with binary installs.

D. J. Bernstein wrote:
> 
> Russell Nelson writes:
> > why are UIDs stored in a binary any more
> > secure than UIDs stored in a configuration file?
> 
> Why should I put extra code into security-critical programs to handle
> something that can be trivially handled at installation time?
> 
>

Reply via email to