Christian Franke:
> Hi,
> 
> just for info: I ported postfix 2.11.3 to Cygwin.
> 
> The patch:
> http://chrfranke.no-ip.org/cygwin/postfix-2.11.3-1.src.patch
> Shouldn't break builds on other platforms. This was tested on Debian.

Generally, this patch skips crucial security/safety features that
are difficult to enforce through a POSIX-on-Windows API. I see no
enforcement of uid/gid separation (permission checks are made in
the program itself instead of in the OS kernel, uid/gid numbers are
passed in an environment variable instead of being protected by the
OS kernel), weak or no enforcement of directory/file/socket
permissions, and no enforcement of file size limits.

Could I support this weakened version of Postfix? I would not put
my reputation on the line.

To run Postfix on Windows, I suggest using a VM with BSD or Linux,
or doing a proper port. The port would abstract out Postfix
security/safety features and provide different translation layers
for POSIX and Windows environments (instead of emulating a POSIX
subset on Windows)

        Wietse

> Binaries are available in the Cygwin net distribution:
> https://cygwin.com/packages/package_list.html
> 
> Thanks,
> Christian
> 
> 

Reply via email to