Comment by stevekemp

My immediate question is around security. If the nethack binary is setuid(root), setgid(games), or similar, are privileges dropped before the exec("mail-command") happens?

We've seen a lot of trivial local escalations like that in the past.