On Mon, Sep 02, 2013 at 02:53:09PM -0400, Scott McEachern wrote: > The problem there is that femail-chroot requires putting a shell > into that chroot, which is something I personally avoid.
Well, whether you need a shell depends on how scripts run external programs. E.g. PHPMailer uses popen(), which requires a shell. I would argue that if you already have php in there, a shell doesn't really make things much worse :)