Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Feb 2001 07:21:44 -0600
From:      "David W. Chapman Jr." <dwcjr@inethouston.net>
To:        "Johann Visagie" <johann@egenetics.com>, "Neil Blakey-Milner" <nbm@mithrandr.moria.org>
Cc:        "Kris Kennaway" <kris@obsecurity.org>, <ports@FreeBSD.org>, <sheldonh@freebsd.org>
Subject:   Re: Needed: apache/httpd ports to use 'www' user
Message-ID:  <002f01c091d2$1529e240$931576d8@inethouston.net>
References:  <20010207014012.B22502@mollari.cthul.hu> <20010207115736.A37769@rapier.smartspace.co.za> <20010208144125.I56586@fling.sanbi.ac.za>

next in thread | previous in thread | raw e-mail | index | archive | help
Postfix-current has run as the user postfix/group postfix for a long time.
> Moving off at a slight tangent...  what about alternative MTAs (where
> "alterntive" means "non-sendmail")?
>
> The only alternative MTA I use fairly often is Exim, and I recently noted
> that the FreeBSD port of Exim is still installed to run as root.  There
are
> certainly some security advantages to be gained from running it as a
> non-privileged user (though this could imply fiddling with the permissions
of
> various spool directories).
>
> Does this apply to other alternative MTAs as well?  If so, should there be
> one "mail" user for all of them, or should they each create their own
sanbox
> user?




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002f01c091d2$1529e240$931576d8>