[Top] [All Lists]

Re: Managesieve Reauthentification. Replication

2008-07-28 04:13:08

Дилян Палаузов writes:
Hello Arnt,

About reauthentification:
> That makes it possible to drop privileges on authentication.
Could you explain this with a little bit more words?

Dropping privileges means that the process voluntarily gives up the rights to do something. In the case of managesieve, the server process voluntarily gives up the ability to access or modify files belonging to any user other than a specified one, and it cannot recover that ability later.

This is often used to limit the effects of bugs, particularly security bugs.


<Prev in Thread] Current Thread [Next in Thread>