dovecot - Dec 2006 - Deliver Root Setuid

Hi,
I just configured my Postfix installation to deliver via Dovecot LDA. But
because I use separate uids for virtual domains I had to set deliver to be
setuid root. Altough I find this as frequent answer to this problem with
deliver LDA I am not a 100% sure - basically because I try to avoid root
setuids as much as I can.

What should be better solution - to have all mailboxes with one owner or
this setuid binary?

My main reason for separate uids was filesystem quotas for whole domain. But
my mail partition resides on XFS so I can do the same with directory quotas
and I also noticed changes in quotas which should be also per domain in some
next release or with patch.

 

Thanks for any advice and also thanks for all great work on Dovecot.

 

            L??a

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20061203/62e50437/attachment-0001.html>

On Sun, 2006-12-03 at 18:23 +0100, L??a wrote:
> Hi,
> I just configured my Postfix installation to deliver via Dovecot LDA.
> But because I use separate uids for virtual domains I had to set
> deliver to be setuid root. Altough I find this as frequent answer to
> this problem with deliver LDA I am not a 100% sure ? basically because
> I try to avoid root setuids as much as I can.
> 
> What should be better solution ? to have all mailboxes with one owner
> or this setuid binary?
I don't think there's a better way right now. I'll probably change
deliver at some point so that you can run it directly under Postfix's
master instead of going through pipe. Then it can be started as root.
> My main reason for separate uids was filesystem quotas for whole
> domain. But my mail partition resides on XFS so I can do the same with
> directory quotas and I also noticed changes in quotas which should be
> also per domain in some next release or with patch.
I guess you could also use virtual quota (eg. maildir++ quota).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20061203/067144bc/attachment.bin>