[dovecot-cvs] dovecot dovecot-example.conf,1.36,1.37

[cras at procontrol.fi]

Update of /home/cvs/dovecot
In directory danu:/tmp/cvs-serv225

Modified Files:
	dovecot-example.conf 
Log Message:
Authentication named socket permissions were insecure, an exploited login
process could have replaced it with it's own and began reading plaintext
passwords sent by other login processes.



Index: dovecot-example.conf
===================================================================
RCS file: /home/cvs/dovecot/dovecot-example.conf,v
retrieving revision 1.36
retrieving revision 1.37
diff -u -d -r1.36 -r1.37
--- dovecot-example.conf	27 Jan 2003 01:33:40 -0000	1.36
+++ dovecot-example.conf	27 Jan 2003 02:42:02 -0000	1.37
@@ -63,10 +63,12 @@
 ## Login process
 ##
 
-# Executable location
+# Executable location.
 #login_executable = /usr/libexec/dovecot/imap-login
 
-# User to use for imap-login process
+# User to use for imap-login process. The user must belong to a group
+# where only it has access, it's used to control access for authentication
+# process named sockets.
 #login_user = imapd
 
 # Set max. process size in megabytes. If you don't use