Security and another survey question (was Re: [Mimedefang] clamd is not responding?)

[Mickey Hill]

> Another survey question: Currently, mimedefang and
> mimedefang-multiplexor complain if you run them as root.  Who votes
> for having them refuse completely to run as root in the next 
> release?

How about defaulting to run as user defang, refusing to run as root, and
providing a compile-/install-/run-time option(s) to run as an alternate
user (including root)?  This is similar to sendmail's default behavior.

This way, you have to really, really want to run as root.
  if ($run_as_root) { md_log('You dummy!') }

_________________________
Mickey Hill
Rudolph's Inc
2021 Rob Mason Rd
PO Box 69
Murray KY 42071 USA
Phone (270) 753-0686 x124
      (800) 231-2295
Fax   (270) 753-4230
mickey at rudolphtire.com
www.rudolphtire.com