Hi,

On Sun, Jul 24, 2022 at 7:14 AM Tobias Geerinckx-Rice <m...@tobias.gr> wrote:
>
> The correct way to make smtpctl setgid is to use Guix System's 
> setuid-programs field, and use (setgid? #t) (group "smtpq") for smtpctl.

In line with TGR's recommendation, the snippet below works locally.

Kind regards
Felix Lechner

* * *

  (setuid-programs
   (append (list

            (setuid-program
             (program (file-append opensmtpd "/sbin/smtpctl"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq"))

            (setuid-program
             (program (file-append opensmtpd "/sbin/sendmail"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq"))

            (setuid-program
             (program (file-append opensmtpd "/sbin/send-mail"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq"))

            (setuid-program
             (program (file-append opensmtpd "/sbin/makemap"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq"))

            (setuid-program
             (program (file-append opensmtpd "/sbin/mailq"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq"))

            (setuid-program
             (program (file-append opensmtpd "/sbin/newaliases"))
             (setuid? #false)
             (setgid? #true)
             (group "smtpq")))

             %setuid-programs))

Reply via email to