Re: Implications of LMTP socket being world readable and writable (0666) by default

  On 31/03/2024 14:47 EEST da-dovecotlist-15--- via dovecot <dovecot@dovecot.org> wrote: Ah yes. Thank you both. I did not think of just overwriting the lmtp socket but was looking for a way to define a new socket with a different name and disable the default one. The main question remains open, though: Is the default setting insecure or am I missing something? You can disable it with mode=0.  It depends a bit on what the default protocols list is. If it does not include lmtp, lmtp is not enabled. Some distros also require installing dovecot-lmtpd before it is even usable. So. It depends. :) Aki