From b2f94206b1d0de36af7688f8139302db94982cae Mon Sep 17 00:00:00 2001
From: Nikolaus Schulz <microschulz@web.de>
Date: Fri, 2 Nov 2007 20:26:40 +0000
Subject: Deprecate the old automatic seteuid feature; document this in the
 manpage and changelog, and let archivemail spit a warning when it changes the
 effective user id.

---
 archivemail.sgml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'archivemail.sgml')

diff --git a/archivemail.sgml b/archivemail.sgml
index 8efef1a..3ce582e 100644
--- a/archivemail.sgml
+++ b/archivemail.sgml
@@ -100,6 +100,12 @@ See below for more <application/IMAP/ peculiarities.
 <Command/archivemail/ has some support for being run as the root user on
 user mailboxes. When running as root, it will &seteuid; to the owner of the
 mailbox it is reading, creating any archive files as that user. 
+<emphasis>Warning:</emphasis>
+<!-- I would like to have a <warning> here, but the dsssl stylesheet thinks a
+    warning need be decorated with a graphic.  *sigh*  I won't start hacking
+    dsssl because of this. -->
+    this automatic seteuid feature is insecure and deprecated. 
+    It will be removed from later versions of <command/archivemail/.
 </Para>
 </RefSect1>
 
-- 
cgit v1.2.3