Re: Ok I'll bite

[Mark Delany]

> You can defeat it much more easily than that, if I'm not mistaken.  Put:
> =root:root:0:0:/:::
> in users/assign.  (man qmail-users for details.)

Nope. You might want to check qmail-lspawn.c

   if (!getuid()) _exit(QLX_ROOT);

Is executed just prior to the execv() call.

So no, you cannot defeat it.

Your other comments are valid though.


Mark.