Re: Two questions about task-harden.

["Scott K. Ellis" <scott@debian.org>]

> > Sure, but there are plenty of other MTAs which can be used in place of
> > sendmail.  Sendmail has a history of security problems; postfix and
> > exim have a history of reasonably secure behavior.  A machine with
> > sendmail installed *isn't* hardened.
>
> To be fair, the sendmail code has improved a lot recently and it actually
> quite decent now, and other mailers such as postfix and exim have not
> been around long enough or are used as often as sendmail to have received
> the same amount of scrutiny.

Of course, there is the latest sendmail vunerability that SuSE is reporting.

http://www.linuxsecurity.com/advisories/suse_advisory-1568.html