Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: > <> > . > Cc: > [EMAIL PROTECTED] sbin]> 2001-11-21 22:41:42 166Vl8-00017q-00 <= > [EMAIL PROTECTED] U=paul P=local S=327 > 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set > uid and gid for local delivery to paul: uid

Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: > <> > . > Cc: > [paul@marge sbin]> 2001-11-21 22:41:42 166Vl8-00017q-00 <= > [EMAIL PROTECTED] U=paul P=local S=327 > 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set > uid and gid for local delivery to paul: uid=1000

Re: MTAs

2001-11-21 Thread Paul Haesler
> > mail's priviledges so giving mail access to any necessary > > directories is enough for exim to function - unless there are issues > > with the permissions of /var/spool/mail/ > username here>. Now another question: are there? > > As long as /var/spool/mail/* is writable/owned by the 'mail' us

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: > >> On the other hand, if exim is run from inetd (as I do), does it > >> still need to be suid root? Since inetd runs root anyway, there should > bit from exim. Now my original question was: does it (exim) still need > to be suid root?

Re: MTAs

2001-11-21 Thread Juha Jäykkä
>> On the other hand, if exim is run from inetd (as I do), does it >> still need to be suid root? Since inetd runs root anyway, there should > well this is not a problem. (x)inet works by using stdin/stdout rather than > network ports. This is why you have to tell whatever service you are > sup

Re: MTAs

2001-11-21 Thread Paul Haesler
> > mail's priviledges so giving mail access to any necessary > > directories is enough for exim to function - unless there are issues > > with the permissions of /var/spool/mail/ > username here>. Now another question: are there? > > As long as /var/spool/mail/* is writable/owned by the 'mail' u

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: > >> On the other hand, if exim is run from inetd (as I do), does it > >> still need to be suid root? Since inetd runs root anyway, there should > bit from exim. Now my original question was: does it (exim) still need > to be suid root

Re: MTAs

2001-11-21 Thread Juha Jäykkä
>> On the other hand, if exim is run from inetd (as I do), does it >> still need to be suid root? Since inetd runs root anyway, there should > well this is not a problem. (x)inet works by using stdin/stdout rather than > network ports. This is why you have to tell whatever service you are > su

Re: MTAs

2001-11-20 Thread Alexander Clouter
Juha J?ykk? [EMAIL PROTECTED] wrote: > > There is a "small" point of binding to port 25. Only root can do > that. I have not looked at exim's code, but if run as a stand-alone > daemon (i.e. not from inetd), I would guess it just opens the port as > root and drops the priviledges right away. Some

Re: MTAs

2001-11-20 Thread Alexander Clouter
Juha J?ykk? [[EMAIL PROTECTED]] wrote: > > There is a "small" point of binding to port 25. Only root can do > that. I have not looked at exim's code, but if run as a stand-alone > daemon (i.e. not from inetd), I would guess it just opens the port as > root and drops the priviledges right away. S

Re: MTAs

2001-11-19 Thread Juha Jäykkä
> I don't know much about exim's guts, but is there a point in starting it > as "mail" if it's SUID root? > -rwsr-xr-x1 root root 466308 sie 15 01:13 /usr/sbin/exim There is a "small" point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run a

Re: MTAs

2001-11-18 Thread Juha Jäykkä
> I don't know much about exim's guts, but is there a point in starting it > as "mail" if it's SUID root? > -rwsr-xr-x1 root root 466308 sie 15 01:13 /usr/sbin/exim There is a "small" point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run

Re: MTAs

2001-11-18 Thread Marcin Owsiany
On Sun, Nov 18, 2001 at 03:02:30PM +1000, Paul Haesler wrote: > > it is a Good Thing to have an MTA which does not run as > > root. I found the argument persuasive, and happily installed postifx. > > I do miss one thing from exim, however. > > Default debian installation of exim runs as mail:

Re: MTAs

2001-11-18 Thread Marcin Owsiany
On Sun, Nov 18, 2001 at 03:02:30PM +1000, Paul Haesler wrote: > > it is a Good Thing to have an MTA which does not run as > > root. I found the argument persuasive, and happily installed postifx. > > I do miss one thing from exim, however. > > Default debian installation of exim runs as mail:

Re: MTAs

2001-11-17 Thread Paul Haesler
> it is a Good Thing to have an MTA which does not run as > root. I found the argument persuasive, and happily installed postifx. > I do miss one thing from exim, however. Default debian installation of exim runs as mail: [EMAIL PROTECTED] procmail]> grep exim /etc/inetd.conf smtp

MTAs

2001-11-17 Thread Corey Halpin
t now. Anyway, in one of the later chapters there is a discussion of MTAs, and it mentions that it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Is there any way with postfix

Re: MTAs

2001-11-17 Thread Paul Haesler
> it is a Good Thing to have an MTA which does not run as > root. I found the argument persuasive, and happily installed postifx. > I do miss one thing from exim, however. Default debian installation of exim runs as mail: [paul@marge procmail]> grep exim /etc/inetd.conf smtpstrea

MTAs

2001-11-17 Thread Corey Halpin
t now. Anyway, in one of the later chapters there is a discussion of MTAs, and it mentions that it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Is there any way with postfix