Wietse Venema:
> Robert Senger:
> > Hi all,
> > 
> > I just upgraded a server from Debian Wheezy to Jessie, and moved the
> > system partition to a new, bigger harddisk. Now I am having trouble with
> > the permissions of the /var/spool/postfix/private folder.
> 
> To fix Postfix file permissions:
> 
> # postfix set-permissions
> 
> If that does not fix the problem, then ask your maintainer.
> 
> Milters have no reason to access the Postfix private directory. Use
> UNIX-domain sockets instead.

The following breaks Postfix security:

- Changing user/group/other ownership/permissions of Postfix files
  or directories

- Running non-Postfix programs with the numeric UID of the "postfix"
  user (or other "security token" with the same effect).

Such usage is explicitly not supported, and that will not change.

        Wietse

Reply via email to