Bug#307768: exim4: check_local_user should reject system users?

Marc Haber Marc Haber <mh+debian-packages@zugschlus.de>, 307768@bugs.debian.org
Thu, 5 May 2005 16:33:33 +0200


On Thu, May 05, 2005 at 07:41:32AM -0400, Marc Sherman wrote:
> It seems to me that the check_local_user router option should fail for
> system users.  Some packages that create system users already put them
> in /etc/aliases pointing to root, but there are a number of system users
> on my machine that are not currently aliased to root.  This seems like a
> maintenance hassle, and possibly a security problem.
> 
> I suspect that if you agree with me, this would be a debian specific
> patch, not something upstream would accept; the concept of system users
> vs. regular users seems to be a debian concept introduced in adduser.

To me, this looks like an issue which could be solved in a dedicated
router which will fail e-mail addressed to system users. However,
there might be packages that need their user to be able to receive mail.

Since I would like all MTAs to behave identically to this behalf, a
change like this would need to be discussed on debian-devel, IMO.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835