Re: [PATCH] Use execvp to call sendmail

[Charles Cazabon <muttdev@xxxxxxxxxxxxxxxxxxxx>]

Christoph Berg <cb@xxxxxxxx> wrote:
>
> Use execvp to call sendmail, useful for people trying sendmail="ssh host
> sendmail".

I'm curious: does the ssh client binary tend to move around the filesystem
randomly on these peoples' systems?

I don't think this is a great change.  Many people unwisely put . in their
path; anyone else on the system could drop a shellscript of that name into a
common directory and capture other users' mail if the path was used to locate
the sendmail program.  Requiring users to explicitly specify the path to it
prevents that privacy risk.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                          <muttdev@xxxxxxxxxxxxxxxxxxxx>
-----------------------------------------------------------------------