On Mon, Feb 03, 2003 at 03:24:46PM -0800,
   Horst <[EMAIL PROTECTED]> writes:

| I am used to sendmail, but mdk 9.0 defaulted to postfix, so I decided to
| try it; i.e. I am asking a postfix-newbie question.
| 
| I noticed in postfix's alias file that mail to root will be only delivered
| to a regular user (see clips below)
| The most transparent work-around I found
| 1) creates a proxy user, e.g. 'rootx' .
| 2) set that in 'aliases'
| 3) point mail program's INBOX to /var/spool/mail/rootx
| 
| Am I missing something? --how do others handle this less clunky ?
| 
|  - Horst
| 
| ~~~~~~~ from the /etc/postfix/aliases ~~~~~~~~~
| ...
| # For various security reasons, postfix WILL NOT deliver mail as root, so
| # ensure that the root alias is aliased to a HUMAN user, as otherwise
| # mail may get delivered to the $default_privs user (nobody).
| ...
[snip]

I would venture to guess that most 'others' handle this problem
by forwarding root mail to an unpriviledged user.

It's a bad idea for root to recieve mail directly (ie. because 
you then invoke a mail client as root, and read a spool file 
full of potentially malicious data from the net). 

But perhaps you have a compelling reason to do so?  Is your
desire to do this part of a solution to a bigger problem --
if so, you might be best served on this list by describing
the bigger picture.  For instance, if you just want to partition
your mail from different sources ... you might be better off
using procmail..

-- 
Darren Shepard | +1 503 409 4078 | http://darren.shepard.org/
  pgp fingerprint: 96D1FB7946171A06BA508FD8E16D6F5F31F0A7D2
_______________________________________________
Eug-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to