OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Olli Artemjev (ollimetaltelecom.org.ru)
Date: Tue Apr 10 2001 - 09:12:04 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi.

    I've installed postfix in unusual environment - at the server mashine I've
    the following permissions at / :

    [roottown /root0]# ls -la / | head -3
    total 3673
    drwxr-x--- 22 root login 1024 Apr 10 18:07 ./
    drwxr-x--- 22 root login 1024 Apr 10 18:07 ../
    [roottown /root0]#

    As you see, only users that are members of 'login' group are allowed to do
    somthing in a system. I've added users from main.cf:
    /etc/postfix/main.cf:default_privs = pmd
    etc/postfix/main.cf:mail_owner = postfix
    to login group:
    [roottown /root0]# grep login /etc/group
    login:x:16:root,root1,olli,rserg,identd,mysql,pmd,postfix
    But this is not enough, as I see. Well, if I do chmod 755 / all is going
    OK, but with the above / permissions I've the following errors in logs:

    Apr 10 14:12:08 town postfix/local[31442]: fatal: open database
    /etc/postfix/aliases.db: Permission denied
    Apr 10 18:12:09 town postfix/qmgr[31418]: warning: end of input while
    receiving
    string data from service private/local
    Apr 10 18:12:09 town
    postfix/qmgr[31418]: warning: private/local: malformed response
    Apr 10 18:12:09 town postfix/master[31416]: warning: process
    /usr/libexec/postfix/local pid 31442 exit status 1
    Apr 10 18:12:09 town
    postfix/master[31416]: warning: /usr/libexec/postfix/local: bad command
    startup -- throttling

    Could anyone tell what I forgot to make? The above restricted /
    permissions are a must for me. What can I do to make postfix work with
    this?

    -- 
    Bye.Olli
    MISiS Telecommunications
    phone:   +7(095)955-0087
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users