Tom Browder:
Does everyone agree with pgndev's detailed cookbook recipe?

On 03.09.17 14:55, Wietse Venema wrote:
No, that advice is incorrect.

1) Specify the opendkim '-u' option with an account that is not
  used by anything else. Not postfix. Not wwww. Not your personal
  account.

2) Make opendkim files/directories owned by root and writable
  only by root.

what about readable by opendkim?

3) Start opendkim as root (DO NOT use systemd user/group settings),

with the above, starting under opendkim:opendkim should be fine.
Of course, unless someone other has access to the opendkim group
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers.

Reply via email to