Re: [Devil-Linux-discuss] 1.2.13: Dovecot deliver lda

[Dick M. <di...@li...>]

Kari Mattsson wrote:
> This problem isn't new to this release but the dovecot lda "deliver" 
> (/usr/libexec/dovecot/deliver) really needs (IMHO) setuid permission set for 
> when it is used in a virtual domains situation.  Otherwise all virtual users 
> have to be given the same uid which is not preferred.
> 
> 	Is that a problem?

Well - as I was writing the message it was occurring to me that it was a problem 
of my own design.  I suspect most DL users would rather avoid setuid programs.

> On Postfix-based systems, when using virtual (non-system) accounts, having just single system user owning all mail

This is becoming apparent ;-) however postfix docs do advise using a different 
uid per domain and that's what I am doing.

> 	Yes, Postfix supports arrangement where each virtual mailbox has different virtual user owner.  
 > Each virtual user uses an uid+gid, so it doesn't scale to 100000+ users..

That's an interesting point but not one I need to worry about right now - I've 
got 4 orders of magnitude to go yet :-)

I think I'll probably bite-the-bullet and change to using a single uid for all 
virtual users.  At least it keeps it simple.

Thanks for your advice.

Dick