Why does dovecot require mysql?

Scot L. Harris webid at cfl.rr.com
Mon Jan 17 03:42:06 UTC 2005

On Sun, 2005-01-16 at 22:24, Warren Togami wrote:
> Scot L. Harris wrote:
> > 
> > Excellent!  There has been some interesting discussion in bugzilla about
> > this issue.  I am glad they will modify this for FC4.  Having to include
> > mysql and postgresql just to use dovecot is major bloat for most users
> > and IMHO a security risk.  It will make security audits more difficult
> > since unused packages are included and adds just that much more code
> > that could have an exploit in it.
> You are overstating the security risk of a single library package that 
> is unused.

Single library?  It looked to me as if the whole set of files that make
up mysql and postgresql were being pulled in and loaded on the system.

Scot L. Harris
webid at cfl.rr.com

Q:	What is orange and goes "click, click?"
A:	A ball point carrot. 

More information about the users mailing list