>>>>> Raul Miller writes:

[quotation removed]

> I think you should look at this issue a bit differently.  In one
> sense, both policies are broken -- delivering mail to a spool
> directory requires sgid programs for the user to read mail (in the
> usual sense).  A more secure and more robust solution would be to
> deliver mail directly into the user's home directory.  For example,
> echo $HOME/Mailbox >$HOME/.forward

That might work for you, but not for others: If your home directory
is located in an AFS volume, then you will either need to open the
directory to a certain pseudo-group/user for WRITES or your sendmail
(or whatever) will need to run with the CellAdministrator token.

Not good.

And /var/mail is standardized (to my knowledge) by SVID and XPG, so
why re-invent the wheel again?

Dominik
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Visit the FAN SITE of the WORLD LEAGUE OF AMERICAN FOOTBALL:
<A HREF="http://www.uni-mainz.de/~kubla/WLAF/Welcome.html>HTTP</A> or
<A 
HREF="file:/afs/zdv.uni-mainz.de/homes/UFO/kubla/public_html/WLAF/Welcome.html">AFS
 file</A> access.


Reply via email to