12 Apr
2008
12 Apr
'08
9:25 p.m.
Am 12.04.2008 20:07 schrieb Gert Cuykens:
[…] Now the security part, i was thinking that this would work also
root@localhost:~# ls -al /usr/lib/dovecot/deliver -rws------ 1 mail mail 563112 2008-03-31 21:05 /usr/lib/dovecot/deliver root@localhost:~#
but it doesnt, changing it to user postfix also doesnt work ?
OK, step by step.
- chown 0.0 /usr/lib/dovecot/deliver
- chmod 755 /usr/lib/dovecot/deliver
- find out the user from postfix's master.cf (... flags=DRhu user=nobody:mail argv=/usr/.../deliver) ^^^^^^ NOT: root, dovecot or postfix!
- mkdir /usr/local/lib/dovecot
- chmod 700 /usr/local/lib/dovecot
- chown nobody /usr/local/lib/dovecot
- cp -p /usr/lib/dovecot/deliver /usr/local/lib/dovecot
- chmod u+s /usr/local/lib/dovecot/deliver
- apply the path from 8. to argv from service dovecot in postfix's master.cf
- restart postfix and enjoy
HTH Pascal