SqWebMail Setuid Root question

In SqWebMail SECURITY.html, it says: 
�SqWebMail must assume permissions of the mail client
in order to be able to access its mailbox.
Additionally, SqWebMail must be able to authenticate
access passwords. For both of these reasons SqWebMail
has to be installed as a setuid root program.�

If the SqWebMail is run as a particular user and
maildirs are owned by that user, to validate passwords
from a SQL database, is it still necessary the
SqWebMail to be installed as a setuid root program? 

Thanks in advance.

Sagara


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

Reply via email to