Nick Howitt via dovecot skrev den 2024-10-26 18:57:

Because webmin didn't set it? Looking at the docs:

     last_valid_uid

            Default: 0

            Values: Unsigned integer

        This setting and first_valid_uid specify the valid UID range
   for users.

        0 means there is no explicit last UID.

stupid, id 0 gives root, no one needs root for dovecot

please make better defaults, stop using nice webtools to screw up security

i will have my weekend now, but i asked on irc, why dovecot is to blame on security now

_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Reply via email to