On Thu, 06 Jun 2002 12:27:47 +0200, Simon Josefsson said:
IMHO losing mail is such an unpleasant thing that a little extra
error
checking is worth it. Even though -oem is used, it makes sense the
In fact, this logic was exactly why Sendmail 8.12's design for removing
the set-UID bit is so byzantine (basically, it kept the set-GID bit
and a separate group-writable spool directory just in case it couldn't write
into the main mqueue directory). Eric Allman put his foot down and said
that we were *not* allowed to lose mail, no matter how unlikely. If we'd been
able to drop stuff on the floor, the design would have been a lot simpler.
/Valdis (who was there)