diff options
author | Matthias Andree <matthias.andree@gmx.de> | 2019-08-19 21:30:39 +0200 |
---|---|---|
committer | Matthias Andree <matthias.andree@gmx.de> | 2019-08-19 21:31:49 +0200 |
commit | 916abfe741d97532ceacd834c2a5229f0a67c3c5 (patch) | |
tree | 49663adb2035c1e449b7babc3490eea6f5980bdf /design-notes.html | |
parent | 86b77d1b7f01a4edacc1d2491b4d3050d1edb680 (diff) | |
download | fetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.tar.gz fetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.tar.bz2 fetchmail-916abfe741d97532ceacd834c2a5229f0a67c3c5.zip |
Update documentation.
Diffstat (limited to 'design-notes.html')
-rw-r--r-- | design-notes.html | 12 |
1 files changed, 5 insertions, 7 deletions
diff --git a/design-notes.html b/design-notes.html index 4aaba5cb..fc4a2c3b 100644 --- a/design-notes.html +++ b/design-notes.html @@ -26,7 +26,8 @@ <h2>Introduction</h2> -<p>This document is supposed to complement <a +<p>This document's contents were last updated in 2006, around fetchmail 6.3.4/6.3.5 time. +It is supposed to complement <a href="esrs-design-notes.html">Eric S. Raymond's (ESR's) design notes.</a> The new maintainers don't agree with some of the decisions ESR made previously, and the differences and new directions will be laid @@ -35,12 +36,9 @@ the necessary code revisions have been made.</p> <h2>Security</h2> -<p>Fetchmail was handed over in a pretty poor shape, security-wise. It will -happily talk to the network with root privileges, use sscanf() to read -remotely received data into fixed-length stack-based buffers without -length limitation and so on. A full audit is required and security -concepts will have to be applied. Random bits are:</p> - + <p> + Fetchmail 6.2.x was handed over in a pretty poor shape, security-wise. It would happily talk to the network with root privileges, used sscanf() to read remotely received data into fixed-length stack-based buffers without length limitation and so on. A full audit is required and security concepts will have to be applied. Random bits are: + </p> <ul> <li>code talking to the network does not require root privileges and needs to run without root permissions</li> |