DragonFly kernel List (threaded) for 2008-02
DragonFly BSD
DragonFly kernel List (threaded) for 2008-02
[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]

Re: dma user config


From: Matthew Dillon <dillon@xxxxxxxxxxxxxxxxxxxx>
Date: Sun, 3 Feb 2008 11:17:07 -0800 (PST)

     Generally speaking you do not want to have per-user DMA configs at 
     all, it's just too big of a security risk.

     What you could do is allow user extensions ala postfix style '.'
     extensions to the target name.  For example:

     dillon@backplane.com
     dillon.fubar@backplane.com  <--- also routes to dillon

     The per-user aliases file (~/.forward) can pipe to programs, which
     means it really has to be run in the context of the user.  DMA itself
     does not have to run as root but you will need a local delivery
     agent that either runs as root or is suid root.

						-Matt



[Date Prev][Date Next]  [Thread Prev][Thread Next]  [Date Index][Thread Index]