OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
virtual uid/gid maps (was: Just a little help with an permiss...)

From: Wietse Venema (wietseporcupine.org)
Date: Wed Apr 12 2006 - 14:47:45 CDT

Victor Duchovni:
> > These are the settings in my main.cf and its working just fine.
> >
> > virtual_gid_maps = static:207
> > virtual_mailbox_base = /usr/local/virtual
> > <snip><snip>
> > virtual_minimum_uid = 207
> > virtual_transport = virtual
> > virtual_uid_maps = static:207
> >
> > These are the entries in /etc/passwd and /etc/group file.
> >
> > postfix:x:207:207:postfix:/var/spool/postfix:/bin/false
>
> This is wrong. The fact that the virtual delivery agent allows you to
> do this is an ommission that should be fixed.

By disallowing static: (or regexp: wild-card) mappings that
return the Postfix UID/GID?

I agree that the Postfix UID/GID should not be used for mailbox
ownership other than the mailbox of the Postfix user, but this may
not be easy to enforce other than by providing guidance in the
documentation and hoping people will dothe right thing.

        Wietse