Why does dovecot require mysql?
Matthew Miller
mattdm at mattdm.org
Mon Jan 17 06:49:36 UTC 2005
On Sun, Jan 16, 2005 at 05:24:10PM -1000, Warren Togami wrote:
> >and IMHO a security risk. It will make security audits more difficult
> >since unused packages are included and adds just that much more code
> >that could have an exploit in it.
> You are overstating the security risk of a single library package that
> is unused.
Still, this isn't a good direction to go. There *could* be security problems
in any code, and not having what you don't need is the 100% sure way to
avoid them. This needs to be split up more. And, it'd be nice to avoid
updates which suddenly pull in new dependencies unless it's strictly
necessary.
--
Matthew Miller mattdm at mattdm.org <http://www.mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>
More information about the fedora-list
mailing list