RE: Security of Cyrus IMAPd vs UofW IMAPd ...

[John Hughes]

>> privileges.  Since all the mailboxes are owned by the Cyrus user, what 
>> would be more secure  of a system that just does mail delivery woulkd 
>> be a hack to sendmail so that once it attaches to port 25 it drops root 
>> and runs as the Cyrus user.  Show me a hack like that, and Cyrus wins 
>> hands down (or two thumbs up) because you can't do that with UofW. 

>Is there any reason you can't just use ``RunAsUser'' and run as cyrus?

Eurgh!  Don't run as user Cyrus, make another and use LMTP for delivery.

Compartmentailisation.