Re: qmail-qread and qmail-qstat as suid root...

[Ian Lance Taylor]

Sean Chittenden <[EMAIL PROTECTED]> writes:

>       Anyone know of any reasion why I shouldn't set the qmail-qread
> and qmail-qstat as setuid root?  I've looked through the source, but
> am looking for a last confirmation or "don't do that."  -sc

Make them setuid qmailq, not setuid root.

That should be safe enough, although there is a slightly increased
chance that a local user can do something horrible to your mail queue.

Ian