Re: mail.local vs. Smail3

[Theo de Raadt <deraadt@cvs.openbsd.org>]

> I would like to make changes to the way OpenBSD delivers and stores mail.
> It's silly and needlessly paranoid to insist that mail.local run as root.
> Instead, the files in the mail spool directory (/var/mail/<user>) should 
> have gid=mail and run mail.local with gid mail and uid nobody (as Smail
> prefers).

Considering all the problems that come from having the spool operate
under another gid (various NFS cooperation issues and such), what are
the supposed security benefits which you see from running the spool as
non-root?

Because, to be honest, I don't see any benefits.