ti...@brokenbits.com writes:

I went through this as well, though I can't imagine tackling it without using scripts executing as root. I've built a complete web front end as which maintains all of our services. Users and domains are all stored in a postgres database and I use scripts which run as cron jobs to write the necessary files. I just set a flag in the db, every minute the script runs, if the flag is set it updates the necessary files.

I'm using my domains table to populate the esmtpacceptmailfor and hosteddomains files (and also to create my named.conf and zonefiles! but that's a different story). I also create a forwards and aliases file in etc/aliases.

I assume since you're using postgres all your mailusers are virtual. If you set permissions correctly I can't think of any security issues.

What is your security concern?

Nick