On Jun 8, 2019, at 6:55 AM, Ralph Corderoy <ralph@inputplus.co.uk> wrote:
Hi Bakul,
I can not think of one reason why inc shoud be set{g,u}id'ed.
I often switch to another user to see if they've any new email they'd
like to know about. All I really need for that is setuid inc that scans
the From and Subject fields.
Probably safer to use "sudo -u another inc" or whatever mh command?
And I think Ken's point was about all nmh, as was my reply.
Hmm... Same response:-)
Privilege escalation should be done externally.
--
nmh-workers
https://lists.nongnu.org/mailman/listinfo/nmh-workers