Public bug reported:

Binary package hint: ssmtp

As /etc/ssmtp/ssmtp.conf can hold plaintext passwords it would be
sensible to block all but the ssmtp group from reading the file. As I
understand the ssmtp program runs as the user that calls it so this
cannot be done.

Can ssmtp be run as a ssmtp user and the ssmtp.conf be only readable to
a ssmtp group

** Affects: ssmtp (Ubuntu)
     Importance: Undecided
         Status: New

-- 
ssmtp.conf security
https://bugs.launchpad.net/bugs/654065
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to