Re: security(8) mailbox check question

2016-01-25 Thread Craig Skinner
Hi all, On 2016-01-23 Sat 22:31 PM |, Joerg Jung wrote: > On Sat, Jan 23, 2016 at 08:31:09PM +0100, Ingo Schwarze wrote: > > This was discussed several times before. e.g: http://openbsd-archive.7691.n7.nabble.com/security-8-check-maildir-as-well-as-mailbox-permissions-td239848.html -- Ray's

Re: security(8) mailbox check question

2016-01-25 Thread Craig Skinner
Hi Ted, On 2016-01-23 Sat 17:27 PM |, Ted Unangst wrote: > > I think the possibility to fill up /var makes it a poor choice. For mail servers, /var/mail/ can be a seperate mount point. /var/log/ is commonly a mount point on servers. As is /var/www/ /var/spool/{smtpd,postfix}

Re: security(8) mailbox check question

2016-01-23 Thread Ingo Schwarze
Hi, the smtpd(8) daemon supports "deliver to maildir" out of the box, and even though putting the user maildirs below /var/mail/ is not the default, it's one of many possible and logical choices, and i see nothing wrong with it. Adam Wolk noticed on misc@ that currently security(8) doesn't like

Re: security(8) mailbox check question

2016-01-23 Thread Ted Unangst
Ingo Schwarze wrote: > the smtpd(8) daemon supports "deliver to maildir" out of the box, > and even though putting the user maildirs below /var/mail/ is not > the default, it's one of many possible and logical choices, and i > see nothing wrong with it. I think the possibility to fill up /var

Re: security(8) mailbox check question

2016-01-23 Thread Joerg Jung
On Sat, Jan 23, 2016 at 08:31:09PM +0100, Ingo Schwarze wrote: > Hi, > > the smtpd(8) daemon supports "deliver to maildir" out of the box, > and even though putting the user maildirs below /var/mail/ is not > the default, it's one of many possible and logical choices, and i > see nothing wrong