Alternative: use unveil rather than chroot+setuid

Open begriffs opened this issue 2 years ago • 3 comments

The code you have already is more portable than what's in this pull request, but I wanted to share this for anyone looking for an alternative to running the program as root. On OpenBSD I let OpenSMTPD spawn minimalist as the _smtpd user. Then I use unveil rather than chroot.

Oct 23 '23 02:10 begriffs

Thanks. I'm on OpenBSD, too. But I don't use minimalist any more. As you notice, unveil() is less portable, so not really suitable as a master branch.

Oct 24 '23 09:10 madroach

I don't use minimalist any more.

A bit off-topic, but may I ask what you use now?

Oct 24 '23 14:10 begriffs

I don't manage any mailinglists anymore.

Oct 24 '23 18:10 madroach