dimi--- via Postfix-users:
> Dear fellow users,
>
> Unless my configuration isn't safe (not yet included), i may have found an
> unwanted behavior in Postfix.
>
> When i set the -v flag in master.cf for smtpd, my logs mail.log contains
> cleartext passwords for my SQL user database. This happens for all my SQL
> queries.
The same thing will happen for AUTH PLAN and AUTH LOGIN, or anything
else that invoves a password-like secret.
If you have untrusted users with shell access, protect your logs
with file permissions.
Wietse
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
