docker-mailserver/target/scripts/startup/setup.d/security
Georg Lauterbach 5f2fb72c9c
Rspamd: add check for DKIM private key files' permissions (#3627)
* added check for Rspamd DKIM on startup

The newly added function `__rspamd__check_dkim_permissions` performs a
check on DKIM private key files. This is useful to prevent issues
like #3621 in the future. The function is deliberately kept simple and
may not catch every single misconfiguration in terms of permissions and
ownership, but it should be quite accurate.

Please note that the Rspamd setup does NOT change at all, and the checks
will not abort the setup in case they fail. A simple warning is emmited.

* add more documentation to Rspamd functions

* Apply suggestions from code review

* improve `__do_as_rspamd_user`

* rework check similar to review suggestion

see https://github.com/docker-mailserver/docker-mailserver/pull/3627#discussion_r1388697547

---------

Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2023-11-13 12:34:46 +01:00
..
misc.sh feat: Allow marking spam as read via a sieve filter (ENV MARK_SPAM_AS_READ=1) (#3489) 2023-08-21 10:32:26 +12:00
rspamd.sh Rspamd: add check for DKIM private key files' permissions (#3627) 2023-11-13 12:34:46 +01:00
spoofing.sh Change 'function' style (#3364) 2023-05-26 01:01:41 +02:00