Bug#3036: automatic adduser/addgroup in postinst (was Re: fingerd)

[Raul Miller <rdm@tad.micro.umn.edu>]

Mark Eichin:
 > Of *course* it does the lookups.

Except it does lookups at compile time (look at printuids, and look in
Makefile for auto-uids.h:)

Routines which use the compile time lookup are qmail-check,
qmail-lspawn, qmail-queue, qmail-setup, qmail-start, and maybe
qmail-rspawn (I've not read the source closely enough to find out).

This has both security and efficiency implications.  At the moment,
qmail will still manage mail even if the passwd file is trashed.  Only
the part which manages local delivery (qmail-lspawn) uses getpwnam()
at runtime.

--
Raul