On Sat, Aug 24, 2019 at 09:42:10AM +0100, Stuart Henderson wrote:
> On 2019/08/24 06:37, Martijn van Duren wrote:
> > $ cat pkg/DESCR 
> > filter-dkim is an opensmtpd filter that signs email with a dkim signature.
> > $
> > 
> > Since I'm not too familiar with ports I would like to pay special
> > attention to the Makefile of both the port as well as the source.
> > 
> > Also, I currently host the release tarballs at my personal server, which
> > I also use for generic other stuff and might not always be available.
> > If someone from the ports team has a more stable location to host the
> > release tarballs let me know.
> > 
> > Furthermore smtpd.conf allows for filters to be run as another user
> > (currently undocumented). I know we're tight for uids, but can we
> > reserve one for this port, so we can protect the dkim signing key from
> > the smtpd users?
> 
> Maybe it makes sense to use a shared uid for the other filters, but
> it sounds reasonable to assign a new uid for this one.
> 
> >                  Or could it be possible to share a uid with another
> > port with similar purpose? E.g. dkimproxy?
> 
> Definitely prefer not to do that.
> 
> Ports UIDs need a more general solution rather than trying to conserve the
> odd 1 or 2 here and there.

Maybe we could also reserve a directory in ports (e.g. mail/opensmtpd-filter)?
So we can have:
mail/opensmtpd-filter/dkim
mail/opensmtpd-filter/dnsbl
and so on...

-- 
Antoine

Reply via email to