diff options
| author | David Woodhouse <David.Woodhouse@intel.com> | 2010-12-18 23:22:17 +0000 |
|---|---|---|
| committer | David Woodhouse <David.Woodhouse@intel.com> | 2010-12-18 23:23:05 +0000 |
| commit | 7f7f05454657fe756dd06d2ee11bfe70c5a1a9a0 (patch) | |
| tree | 13d55aeb62f280ab1dc2c7c98a5dabacfd962a27 /doc/doc-docbook | |
| parent | be914e6c92998e85a2e22b0d171314ab03a9ad3d (diff) | |
Make the documentation cleared that TRUSTED_CONFIG_LIST is pathname one per line
Diffstat (limited to 'doc/doc-docbook')
| -rw-r--r-- | doc/doc-docbook/spec.xfpt | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt index ed966ad5e..cd142e4da 100644 --- a/doc/doc-docbook/spec.xfpt +++ b/doc/doc-docbook/spec.xfpt @@ -3334,10 +3334,12 @@ proceeding any further along the list, and an error is generated. When this option is used by a caller other than root, and the list is different from the compiled-in list, Exim gives up its root privilege immediately, and runs with the real and effective uid and gid set to those of the caller. -However, if a TRUSTED_CONFIG_LIST file is defined in &_Local/Makefile_&, root -privilege is retained for any configuration file which is listed in that file -as long as the caller is the Exim user (or the user specified in the -CONFIGURE_OWNER option, if any). +However, if a TRUSTED_CONFIG_LIST file is defined in &_Local/Makefile_&, that +file contains a list of full pathnames, one per line, for configuration files +which are trusted. Root privilege is retained for any configuration file so +listed, as long as the caller is the Exim user (or the user specified in the +CONFIGURE_OWNER option, if any), and as long as the configuration file is +not writeable by inappropriate users or groups. Leaving TRUSTED_CONFIG_LIST unset precludes the possibility of testing a configuration using &%-C%& right through message reception and delivery, |