Re: Why make the "virtual" directory world executable?

From: Matt England (no email)
Date: Wed Jun 01 2005 - 00:19:31 EDT

  • Next message: Matt England: "Re: Working examples of "pipe forwards"?"

    >There's no shortage of bad advice on the 'Net.

    Well, the reference is a wiki. Wiki's are good at adjusting themselves if
    a community chooses to adopt the content.

    >http://postfixwiki.org/index.php?title=Virtual_Users_and_Domains_with_Courier-IMAP_and_MySQL#Postfix_Install

    Unfortunately, a new admin like myself is awash in a stunning array of
    somewhat confusing documentation. Why not have the postfix community on
    this list band together, agree to collaborate and consolidate, and
    continually maintain a set of content on ONE wiki?

    And can postfixwiki.org be that wiki? If not...can someone please pick
    one...and then start a movement for everyone to leverage each other's work
    and possibly reduce some of the support work here on the mail list?

    Just a thought. I'm still stunned about how fractured postfix docs (and
    related things like postfixadmin and courier-imap) seem to be in soooo many
    different places...with duplicate and/or conflicting info.

    So why not leverage the power of a wiki in one site?

    -Matt

    At 5/31/2005 08:54 PM, Victor Duchovni wrote:
    >On Tue, May 31, 2005 at 08:42:25PM -0500, Matt England wrote:
    >
    > > Hello,
    > >
    > > In the following reference:
    > >
    > >
    > http://postfixwiki.org/index.php?title=Virtual_Users_and_Domains_with_Courier-IMAP_and_MySQL#Postfix_Install
    > >
    > > we see the following recommended commands for the virtual mailboxes
    > > directory:
    > >
    > > % mkdir /usr/local/virtual
    > > % chown -R postfix:postfix /usr/local/virtual
    > > % chmod -R 771 /usr/local/virtual
    >
    >This is wrong. The postfix user and group must not be used for any
    >files outside the Postfix spool directory. There must be a separate
    >user:group (often vmail:vmail) that owns virtual mailboxes/maildirs.
    >
    > > What does a world-executable (but neither world-readable nor
    > > world-writable) setting do or mean in this context? Why is it set this
    > > way? Is it a mistake in the docs?
    > >
    >
    >This hides the names of the underlying mailboxes from mortals. The
    >value of this questionable. More typical is either mode 700 or mode
    >755 with 700 for the actual mailboxes/maildirs.
    >
    >There's no shortage of bad advice on the 'Net.
    >
    >--
    > Viktor.
    >
    >Disclaimer: off-list followups get on-list replies or get ignored.
    >Please do not ignore the "Reply-To" header.
    >
    >To unsubscribe from the postfix-users list, visit
    >http://www.postfix.org/lists.html or click the link below:
    ><mailto:?body=unsubscribe%20postfix-users>


  • Next message: Matt England: "Re: Working examples of "pipe forwards"?"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD