docker-mailserver/target/scripts/startup/setup.d
Georg Lauterbach 26214491ef
fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625)
* update K8s deployment

Because `allowPrivilegeEscalation` controls SUID/SGID, we require it
when postdrop is invoked.

* correct permissions for maildrop/public

The reason our permissions previously worked out as that in setups where
SUID/SGID worked, the binaries used to place files in these directories
already have SGID set; the current set of permissions makes less sense
(as explained in this comment:
https://github.com/docker-mailserver/docker-mailserver/issues/3619#issuecomment-1793816412)

Since the binaries used to place files inside these directories alredy
have SUID/SGID set, we do not require these bits (or the sticky bit) to
be set on the directories.

* Apply suggestions from code review

---------

Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2023-11-10 19:57:17 +01:00
..
security misc: final Rspamd adjustments for v13 (#3599) 2023-10-30 10:20:37 +01:00
dmarc_dkim_spf.sh scripts: add wrapper to update Postfix configuration safely (#3484) 2023-08-22 08:03:41 +00:00
dovecot.sh Change 'for' style (#3368) 2023-05-26 14:00:40 +02:00
fetchmail.sh Change 'for' style (#3368) 2023-05-26 14:00:40 +02:00
getmail.sh Change 'for' style (#3368) 2023-05-26 14:00:40 +02:00
ldap.sh chore: LDAP config improvements (#3522) 2023-09-02 22:07:02 +12:00
log.sh refactor: logrotate setup + rspamd log path + tests log helper fallback path (#3576) 2023-10-14 17:14:10 +02:00
mail_state.sh fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625) 2023-11-10 19:57:17 +01:00
networking.sh Change 'for' style (#3368) 2023-05-26 14:00:40 +02:00
postfix.sh Change 'while' style (#3365) 2023-05-26 01:39:39 +02:00
saslauthd.sh chore: LDAP config improvements (#3522) 2023-09-02 22:07:02 +12:00
vmail-id.sh feat: Allow changing the Dovecot vmail UID/GID via ENV (#3550) 2023-10-01 00:20:03 +13:00