• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

postfix file permissions

Red Squirrel

Red Squirrel

No Lifer
which permissions do I need to set on postfix related files such as virtual hosts? I tried 700 owned by postfix😛ostfix, I tried root:mail and every other possible combination. I'm sure root:root chmod 777 would work but I don't want to set it to that since other people will have access to this server eventually, so is there a secure way of setting this up?
 
Mine are all root:root 0644 but then I never really paid attention since it's not a shared box. Most of the postfix binaries seem to run as the postfix user so having him own them should be good enough. I'm sure there's securing postfix docs out there that could give a more definititive answer though.
 
Yes 0644 means world readable, but I was only talking about the config files and not the mail spool itself.
 
I never paid attention the postfix spools, the package set those up for me and just now looking they look secure enough. I'm not using any vhosts in postfix though.
 
I think theres something with uids and guids that I have to setup, what exactly are those?

I think it has to do with these options:

virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

Perhaps I have to set that to something else. (this is default from postfix docs)
 
Think I got it going, the uid is the number thats in /etc/passwd and the guid is the number in /etc/groups (matching with user/group).

Also noticed I can't use postfix, have to create my own user. So just made one called mailbox so I chmodded the mail spool to 770 and made it owned by mailbox:mail. then when I get to configuring dovecot I'll just make it run as user mail and hopefully that will work.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top