Subject: Re: Permissions

From: Hadmut Danisch <[email-masked]>
Date: Wed, 11 Mar 2026 13:32:17 +0100

Am 11.03.26 um 13:08 schrieb John Goerzen:
> That's not a flaw; that's a feature.  setuid is a security risk, and
> makes the assumption that every user on the system wants to run the
> systemwide NNCP.  That's not really necessary with NNCP; it is entirely
> possible for every user to have their own NNCP instance that runs right
> out of their home directory, for instance.

So what is the user nncp and /var/spool/nncp good for, if no one could 
ever use it by design?

Should every single process (postfix, databases,...) which is supposed 
to send files, have it's own nncp configuration and daemon?

I'm not talking about individual users. I'm talking about several 
services which should send backups, transfer e-mails and so on. Should 
they share a spool, a configuration, and a key, or should they have 
their own one?

regards

Hadmut