dovecot: dovenull user should have its own group.

Quoting from https://wiki.dovecot.org/UserIds#dovenulluser:

"It should belong to its own private dovenull group where no one else
belongs to..."
This commit is contained in:
Drew Hess 2018-10-22 13:57:32 -04:00
parent 01fcaf8d29
commit fa388534e4
No known key found for this signature in database
GPG Key ID: DEDAB57E001BD839
2 changed files with 6 additions and 2 deletions

View File

@ -385,7 +385,7 @@
virtuoso = 44; virtuoso = 44;
#rtkit = 45; # unused #rtkit = 45; # unused
dovecot2 = 46; dovecot2 = 46;
#dovenull = 47; # unused dovenull2 = 47;
prayer = 49; prayer = 49;
mpd = 50; mpd = 50;
clamav = 51; clamav = 51;

View File

@ -311,7 +311,7 @@ in
{ name = "dovenull"; { name = "dovenull";
uid = config.ids.uids.dovenull2; uid = config.ids.uids.dovenull2;
description = "Dovecot user for untrusted logins"; description = "Dovecot user for untrusted logins";
group = cfg.group; group = "dovenull";
} }
] ++ optional (cfg.user == "dovecot2") ] ++ optional (cfg.user == "dovecot2")
{ name = "dovecot2"; { name = "dovecot2";
@ -332,6 +332,10 @@ in
} }
++ optional (cfg.createMailUser && cfg.mailGroup != null) ++ optional (cfg.createMailUser && cfg.mailGroup != null)
{ name = cfg.mailGroup; { name = cfg.mailGroup;
}
++ singleton
{ name = "dovenull";
gid = config.ids.gids.dovenull2;
}; };
environment.etc."dovecot/modules".source = modulesDir; environment.etc."dovecot/modules".source = modulesDir;