OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Does main.cf need world readable?

From: Wietse Venema (wietseporcupine.org)
Date: Mon Mar 09 2009 - 08:30:34 CDT


Victor Duchovni:
> On Sun, Mar 08, 2009 at 08:47:53PM -0700, Jacky Chan wrote:
>
> >
> > Hi all,
> >
> > I found when I set main.cf to 740, owner is root and group is postfix.
> >
> > [11:41:55][user01nx1:~]# echo "testing" | mail -s "testing" root
> > [11:41:58][user01nx1:~]# send-mail: fatal: open /etc/postfix/main.cf:
> > Permission denied
> >
> > Does main.cf need world readable?
>
> Yes.
>
> > If so, the setting in main.cf will be world readable also.
>
> Yes.

If you tinker with Postfix access permissions, you void the warranty,
and you lose support.

        Wietse