Re: dot-qmail security

[Scott D. Yelich]

> That you think qmail-local has some divine way of knowing what exactly you 
> wish to constrain is endowing it with too much prescience.


Not really.  Have it look up digital signatures for programs it runs.
If the signature is missing or has changed, don't run the program.

Not all digital signatures need to be resource intensive so
I don't want to hear about hurting qmail's efficiency.

Scott