Re: SUID pop3 / imap4?

[Sergey Poznyakoff]

> I'm not sure what the Right Thing is here.  I can set the pop3d to be
> SUID root, which allows it to work.  I tried making it SUID mail, and
> it loads, but it can't get past pam.
> 
> I just hate SUID binaries... =)
> 
> The followup question is: Should the Makefile install it chmod +s, or
> should just the Debian package do it?

I believe neither of them should do it. Pop3d is supposed to be
started with root privileges. Installing it setuid requires careful
analysis of possible security implications. If a system administrator
chooses to make it setuid, he can always do it manually, but `make install'
would better stay on a safe side and make it 755.

Regards,
Sergey