Home / server / Questions / 341151
Accepted
Dexter
Asked: 2011-12-16 00:50:11 +0800 CST

Postfix, set privileges for piping

  • 772

I configured postfix on my box to call a php script on incoming e-mails, using virtual aliases. The script is being called, but it runs as "nobody" and thus I can't send signals to another program from my script that runs as a real user.

I found the setting default_privs and set it to the user that runs the program I want to signal, and this works, but that still allows me to signal only programs of that one user.

How can I solve this? I guess putting root in default_privs and having the called script su into the appropriate user account would be a stupid move, but what alternatives are there?

linux ubuntu postfix pipe

1 Answers

  1. Best Answer

    Set a transport in master.cf for piping. There you can set the option user= to run the pipe under that user. Exactly as described in the manual: http://www.postfix.org/pipe.8.html

    As stated in the other manual for default_privs: "DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER."

    • 1