Re: MTAs

2001-11-21 Thread Juha Jäykkä
On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should well this is not a problem. (x)inet works by using stdin/stdout rather than network ports. This is why you have to tell whatever service you are

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should bit from exim. Now my original question was: does it (exim) still need to be suid root? And

Re: MTAs

2001-11-21 Thread Paul Haesler
mail's priviledges so giving mail access to any necessary directories is enough for exim to function - unless there are issues with the permissions of /var/spool/mail/insert your favourite username here. Now another question: are there? As long as /var/spool/mail/* is writable/owned by

Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: snip . Cc: [paul@marge sbin] 2001-11-21 22:41:42 166Vl8-00017q-00 = [EMAIL PROTECTED] U=paul P=local S=327 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set uid and gid for local delivery to paul: uid=1000

Re: MTAs

2001-11-21 Thread Juha Jäykkä
On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should well this is not a problem. (x)inet works by using stdin/stdout rather than network ports. This is why you have to tell whatever service you are

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should bit from exim. Now my original question was: does it (exim) still need to be suid root? And

Re: MTAs

2001-11-21 Thread Paul Haesler
mail's priviledges so giving mail access to any necessary directories is enough for exim to function - unless there are issues with the permissions of /var/spool/mail/insert your favourite username here. Now another question: are there? As long as /var/spool/mail/* is writable/owned by

Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: snip . Cc: [EMAIL PROTECTED] sbin] 2001-11-21 22:41:42 166Vl8-00017q-00 = [EMAIL PROTECTED] U=paul P=local S=327 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set uid and gid for local delivery to paul: uid=1000

Re: MTAs

2001-11-20 Thread Alexander Clouter
Juha J?ykk? [[EMAIL PROTECTED]] wrote: There is a small point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run as a stand-alone daemon (i.e. not from inetd), I would guess it just opens the port as root and drops the priviledges right away. Someone

Re: MTAs

2001-11-20 Thread Alexander Clouter
Juha J?ykk? [EMAIL PROTECTED] wrote: There is a small point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run as a stand-alone daemon (i.e. not from inetd), I would guess it just opens the port as root and drops the priviledges right away. Someone

Re: MTAs

2001-11-19 Thread Juha Jäykkä
I don't know much about exim's guts, but is there a point in starting it as mail if it's SUID root? -rwsr-xr-x1 root root 466308 sie 15 01:13 /usr/sbin/exim There is a small point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run as a

Re: MTAs

2001-11-18 Thread Marcin Owsiany
On Sun, Nov 18, 2001 at 03:02:30PM +1000, Paul Haesler wrote: it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Default debian installation of exim runs as mail:

Re: MTAs

2001-11-18 Thread Juha Jäykkä
I don't know much about exim's guts, but is there a point in starting it as mail if it's SUID root? -rwsr-xr-x1 root root 466308 sie 15 01:13 /usr/sbin/exim There is a small point of binding to port 25. Only root can do that. I have not looked at exim's code, but if run as a

Re: MTAs

2001-11-18 Thread Marcin Owsiany
On Sun, Nov 18, 2001 at 03:02:30PM +1000, Paul Haesler wrote: it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Default debian installation of exim runs as mail:

Re: MTAs

2001-11-17 Thread Paul Haesler
it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Default debian installation of exim runs as mail: [paul@marge procmail] grep exim /etc/inetd.conf smtpstream

Re: MTAs

2001-11-17 Thread Paul Haesler
it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Default debian installation of exim runs as mail: [EMAIL PROTECTED] procmail] grep exim /etc/inetd.conf smtp