[Dovecot] don't follow symlinks when creating mailbox list

Dan Horák dan at danny.cz
Wed Jun 18 10:35:00 EEST 2008


this issue was discussed here twice in the not so far history
http://www.dovecot.org/list/dovecot/2008-February/029147.html), but I
need to open it again as it makes problems for our users on one side and
on the other side we don't want to diverge from the upstream sources in
our packages. I agree with Timo that simply disabling the symlink
following in creating the mailbox list can give a false sense of
security so the question is whether a permanent solution can be
developed and how it should look like?


Fedora and Red Hat package maintainer

More information about the dovecot mailing list