On 19.7.2010, at 22.59, Frank van Amsterdam wrote:
Scenario 1
-rwsr-xr-x 1 root root 870720 mrt 18 17:54 /usr/lib/dovecot/deliver
Scenario 2
-rwsr-xr-x 1 root root 870720 mrt 18 17:54 /usr/lib/dovecot/deliver
None of these are what http://wiki.dovecot.org/LDA#multipleuids tells you to do.
Scenario 3
I've changed /etc/sudoers
Defaults:dovelda !syslog mail ALL=NOPASSWD:/usr/lib/dovecot/deliver
And I've also changed /etc/postfix/master.cf
dovecot unix - n n - - pipe flags=DRhu user=mail:mail argv=/usr/bin/sudo /usr/lib/dovecot/deliver -f ${sender} -d ${user}
It looks like this is working for me. Is it secure enough?
Well, I'd use a dedicated user rather than "mail", just in case there is something else also running as mail.