Why does dovecot require mysql?

Scot L. Harris webid at cfl.rr.com
Mon Jan 17 03:42:06 UTC 2005


On Sun, 2005-01-16 at 22:24, Warren Togami wrote:
> Scot L. Harris wrote:
> > 
> > Excellent!  There has been some interesting discussion in bugzilla about
> > this issue.  I am glad they will modify this for FC4.  Having to include
> > mysql and postgresql just to use dovecot is major bloat for most users
> > and IMHO a security risk.  It will make security audits more difficult
> > since unused packages are included and adds just that much more code
> > that could have an exploit in it.
> 
> You are overstating the security risk of a single library package that 
> is unused.
> 

Single library?  It looked to me as if the whole set of files that make
up mysql and postgresql were being pulled in and loaded on the system.


-- 
Scot L. Harris
webid at cfl.rr.com

Q:	What is orange and goes "click, click?"
A:	A ball point carrot. 




More information about the users mailing list