Re: SUID pop3 / imap4?

[Sam Roberts]

Quoteing address@hidden, on Thu, Apr 04, 2002 at 07:08:01PM -0500:
> On Wed, Apr 03, 2002 at 06:36:25PM +0300, Sergey Poznyakoff wrote:
> > > The followup question is: Should the Makefile install it chmod +s, or
> > > should just the Debian package do it?
> > 
> > I believe neither of them should do it. Pop3d is supposed to be
> > started with root privileges. Installing it setuid requires careful
> > analysis of possible security implications.
> 
> OYE.  I will reiterate:  THERE IS NO DIFFERENCE BETWEEN RUNNING AS ROOT AND
> SUID.

Not to sure what you mean by no differences, the uid is different, for
instance.

Sam

-- 
Sam Roberts <address@hidden> (Vivez sans temps mort!)