Re: alternatives to procmail: security

2014-11-20 Thread Claus Assmann
So which of the suggested alternatives (fdm, sieved, ???) have undergone a security audit or at least can claim that no problems were found when using some of those fuzzing tools? Before switching from procmail to something else it would be nice to know if that alternative is (more) secure.

Re: alternatives to procmail: security

2014-11-20 Thread Theo de Raadt
So which of the suggested alternatives (fdm, sieved, ???) have undergone a security audit or at least can claim that no problems were found when using some of those fuzzing tools? Well the real answer here is that procmail hasn't undergone a security audit and has a claim that it just failed