Avoiding Running as root

• DefaultUser (confDEF_USER_ID)

  • mailers run as this user (unless otherwise specified)
  • programs run from alias files run as this user
  • defaults to mailnull, then sendmail, then daemon, then uid 1
  • should have invalid shell, no password, and should not own any files

• TrustedUser (confTRUSTED_USER)

  • owns maps, alias files, etc