Why does dovecot require mysql?
Scot L. Harris
webid at cfl.rr.com
Mon Jan 17 03:42:06 UTC 2005
On Sun, 2005-01-16 at 22:24, Warren Togami wrote:
> Scot L. Harris wrote:
> >
> > Excellent! There has been some interesting discussion in bugzilla about
> > this issue. I am glad they will modify this for FC4. Having to include
> > mysql and postgresql just to use dovecot is major bloat for most users
> > and IMHO a security risk. It will make security audits more difficult
> > since unused packages are included and adds just that much more code
> > that could have an exploit in it.
>
> You are overstating the security risk of a single library package that
> is unused.
>
Single library? It looked to me as if the whole set of files that make
up mysql and postgresql were being pulled in and loaded on the system.
--
Scot L. Harris
webid at cfl.rr.com
Q: What is orange and goes "click, click?"
A: A ball point carrot.
More information about the fedora-list
mailing list