Re: sendmail -f

[Matti Aarnio <mea@nic.funet.fi>]

On Wed, Jan 15, 2003 at 10:12:22PM -0500, acli@ada.dhs.org wrote:
> Well, at the very least, "nobody" is by convention an untrusted
> user :-)
>  
> If you trust all the servers that run as nobody, I suppose there
> aren't other consequences.

http://www.zmailer.org/zman/zins-sysconfig.html#ZINS-RTF.ETC.GROUP

  SECURITY ITEM: Those users at zmailer group must not contain "nobody"!

  The "nobody" is used to prevent externally given inputs from being able
  to execute arbitrary programs at the system, or from writing to arbitrary
  files.


Yes, no other significant consequences..

> -- 
> Ambrose Li  <a.c.li@ieee.org>

-- 
/Matti Aarnio	<mea@nic.funet.fi>
-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi