Re: [Dovecot] SetUID check problem

On Tue, 2009-10-27 at 09:03 -0400, Thomas Berezansky wrote:

But for whatever reason, when deliver is called by something that IS
SetUID root I get the following error:

/usr/local/libexec/dovecot/deliver must not be both world-executable
and setuid-root. This allows root exploits. See
http://wiki.dovecot.org/LDA#multipleuids

Fixed: http://hg.dovecot.org/dovecot-1.2/rev/ead94beba32a