From mboxrd@z Thu Jan 1 00:00:00 1970 From: erik quanstrom Date: Mon, 27 Oct 2014 15:10:40 -0400 To: 9fans@9fans.net Message-ID: In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Subject: Re: [9fans] Setting up Mail in Acme on the Raspberry Pi. Topicbox-Message-UUID: 211b5da2-ead9-11e9-9d60-3106f5b1d025 On Mon Oct 27 12:34:58 EDT 2014, lucio@proxima.alt.za wrote: > > one does not have to put eve in adm or especially sys. in fact, i think this > > makes one's system significantly less secure. > > It's complicated, in that access controls are enforced by distinct > entities with potentially very distinct criteria. Trying to conceive > all possible combination of clients, servers and third-party > authenticators can lead to massive migraines. it's not complicated. permissions work like unix. there is simply a lack of the unix requirement that the owner of the file server be the owner of the cpu server. certainly one could require different creds for the same user on every host, but we don't do that. - erik