Re: Bug&patch: cyrus-imapd-2.0.16 not setting process gids

[Christopher Wong]

On Monday 10 September 2001 11:54, Amos Gouaux wrote:
>
> Seems to me the more permissions that are granted to user cyrus, the
> more you loose any benefit of the Cyrus software running as non-root.

The "shadow" method gives "shadow" privileges to a Cyrus daemon. The 
pwcheck method requires root privilege for the pwcheck daemon. I would 
suggest that there is a qualitative difference between the mere ability 
to read /etc/shadow and full root privileges.

Chris