18 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] Re: replacing procmai...
FromSent OnAttachments
David RelsonJun 21, 2004 5:56 pm 
PollywogJun 21, 2004 6:20 pm 
Sam VarshavchikJun 21, 2004 7:01 pm 
PollywogJun 21, 2004 7:31 pm 
David RelsonJun 21, 2004 8:18 pm 
Robin Lynn FrankJun 21, 2004 9:05 pm 
Ron JohnsonJun 22, 2004 1:33 am 
Matthias AndreeJun 22, 2004 3:26 am 
David RelsonJun 22, 2004 5:04 am 
Tony EarnshawJun 22, 2004 5:08 am 
David RelsonJun 22, 2004 5:19 am 
Devin RubiaJun 22, 2004 7:34 am 
Ron JohnsonJun 22, 2004 8:15 am 
Robin Lynn FrankJun 22, 2004 8:25 am 
Matthias AndreeJun 22, 2004 8:29 am 
Nick SimicichJun 22, 2004 11:32 am 
David RelsonJun 22, 2004 2:27 pm 
Robin Lynn FrankJun 22, 2004 4:07 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [maildropl] Re: replacing procmail with maildropActions...
From:Devin Rubia (dev@thezone.net)
Date:Jun 22, 2004 7:34:40 am
List:net.sourceforge.lists.courier-maildrop

On Tue, Jun 22, 2004 at 12:26:12PM +0200, Matthias Andree wrote:

Sam Varshavchik <mrs@courier-mta.com> writes:

I would try to determine the owner of the maildrop process,

The owner of the maildrop process is the userid the message is being delivered to.

I can see two solutions without knowing off-hand if maildrop implements either already:

1. offer to run a separate (and possibly restricted) configuration file BEFORE dropping privileges when setuid-root

2. offer to log into a command instead of a file. That might then be setgid and be as simple as a read and a write.

3. implement syslog type logging in mailfilters. (#2 could provide this functionality using the logger(1) program but would be more CPU/disk intensive.)

4. Create a FIFO and set that as your logfile, then have a program drain the FIFO into a seperate logfile. (Not much different than just logging to a file but you could put some smarts into the draining program, disk usage limits and whatnot.) Heck, you could even have the drainer dump to syslog.

-- Devin