On Sat, 11 Dec 1999, George Bonser wrote:

> NOT want to be able to type the path to another user's directory and see
> their mail (or they, mine). My mail folders need to be unreadable by any
> other user except me and the mail delivery program.

That is why you integrate the proper security measures into your IMAP
daemon - for instance you could have to chroot to the proper user
directory so that it cannot access files ouside that area  then have it
run as not-root so it cannot chroot out.

There are many other possible schemes that don't require uids, but they
all need special code.

Jason

Reply via email to