[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: default MTA for sarge



On Wed, 16 Jul 2003 14:44:26 +0200, Marco d'Itri <md@Linux.IT> wrote:
>Then it does not "drops root privilages and runs as uid mail", it only
>temporarily switches UID (and like it can switch back so could an
>exploit).

IIRC exim re-execs itself to regain root privileges. The child treats
all data coming in from the parent as untrusted and proceeds to drop
its root privileges at the earliest possibility.

Greetings
Marc

-- 
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber          |   " Questions are the         | Mailadresse im Header
Karlsruhe, Germany  |     Beginning of Wisdom "     | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG "Rightful Heir" | Fax: *49 721 966 31 29



Reply to: