Ralph Seichter, Ralph Seichter via Postfix-users wrote in
 <87v80ujyjr....@ra.horus-it.com>:
 |* Bob via Postfix-users:
 |
 |> I get it might be a bit flakey from a security perspective and should
 |> come with warnings but it is my box.
 |
 |I think it is more than "a bit flakey". You ask Wietse to support
 |something which introduces a significant security risk. Plus, this

Now you exaggerate a bit.  Nothing would prevent actual process
creation from within a separate process, with different
privileges.  (Whether with fork+cleanup+exec from within the same, or from
within a dedicated permanent "super-clean" "super-clean" spawner
that gets to-exec info via some sort of IPC.)

 |particular something is not within Postfix's operational scope.

Hm.  Wietse does not want to take the approach.  But actually it
is, all the "events" exist and cause actions one way or another,
currently log, policy, milter (generally speaking).  It could be
designed the other way around; ie, log producer could be just
another event listener, for example.

 |This reminds me: I have had people ask me to support Python versions 3.6
 |and even earlier in some of my software; versions which have reached
 |their respective end-of-life years ago. I could do it, but for security
 |reasons alone I don't. People who want to play fast and loose with
 |security can do so if they like, but I choose not to help them aim guns
 |at their feet.

Heck my mailing-lists still use mailman2 and python2, even though
AlpineLinux moved on and does no longer support it.  And i just
find no time for nothing, how much i would love to have a simple
different one...  Daroussin of FreeBSD took over mlmmj for
addressing this lack for FreeBSD some time ago; i started off with
mlmmj long before that, but found (minor you know) bugs and
deficiencies, especially regarding MIME and such.  Maybe i should
look again.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)
|
| Only during dog days:
| On the 81st anniversary of the Goebbel's Sportpalast speech
| von der Leyen gave an overlong hypocritical inauguration one.
| The brew's essence of our civilizing advancement seems o be:
|   Total war - shortest war -> Permanent war - everlasting war
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to