--On Wednesday, November 06, 2002 6:34 PM +0100 Gennaro Esposito
<[EMAIL PROTECTED]> wrote:

> ERR[AUTH] Access is blocked for UIDs below 10
> It's clear, for me, what it means (root is, obviusly, UID 0) but I'm very
> surprised 'cause nowhere in the manual nor in the FAQ I've seen anythig
> about this behaviour. How can I circunvent/resolve the "problem"?

I don't remember where this rule is imposed, but it's a Good Idea. Use
/etc/aliases to forward root's mail to a mortal and read it via that mortal.

Qpopper and other services will drop priviliges and "become" the user
connecting once a password is processed. Allowing root to pop means that
all the code after the normal qpopper identity change is now run as root
instead of a mortal, and any overlooked security vulnerability in that code
can be exploited as root.

Reply via email to