Why does dovecot require mysql?

Warren Togami warren at togami.com
Mon Jan 17 03:24:10 UTC 2005


Scot L. Harris wrote:
> 
> Excellent!  There has been some interesting discussion in bugzilla about
> this issue.  I am glad they will modify this for FC4.  Having to include
> mysql and postgresql just to use dovecot is major bloat for most users
> and IMHO a security risk.  It will make security audits more difficult
> since unused packages are included and adds just that much more code
> that could have an exploit in it.

You are overstating the security risk of a single library package that 
is unused.

Warren




More information about the fedora-list mailing list