From: Stephen A. <fet...@ro...> - 2006-07-06 09:26:12
|
Rob MacGregor wrote: > There is no need, unless you're passing email directly to a non-SUID > MDA, to run fetchmail as root. Indeed, future versions of fetchmail > will refuse to run as root. I haven't run fetchmail as root since > before 6.0 was released and have not had any problems. > > Simply run it as a standard user (say "fetchmail") and have it pass > email to your MTA. > > In general, running any program with higher privileges than it > requires is a security risk. Thanks Rob, I take note about not running it as root and will fix that ASAP. My questions was mainly aimed at, should I run one instance of fetchmail to poll all POP3 accounts for all 8 users, or should I set up a seperate instance per-user? And I thought it might be significant to say that the users cannot log in via a shell. Thanks, Steve :) |