docker-mailserver/docs/content/config/advanced
Georg Lauterbach 26214491ef
fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625)
* update K8s deployment

Because `allowPrivilegeEscalation` controls SUID/SGID, we require it
when postdrop is invoked.

* correct permissions for maildrop/public

The reason our permissions previously worked out as that in setups where
SUID/SGID worked, the binaries used to place files in these directories
already have SGID set; the current set of permissions makes less sense
(as explained in this comment:
https://github.com/docker-mailserver/docker-mailserver/issues/3619#issuecomment-1793816412)

Since the binaries used to place files inside these directories alredy
have SUID/SGID set, we do not require these bits (or the sticky bit) to
be set on the directories.

* Apply suggestions from code review

---------

Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>
2023-11-10 19:57:17 +01:00
..
mail-forwarding docs: Fix typos (#3443) 2023-07-27 12:24:36 +12:00
maintenance docs: Revise watchtower page (#3583) 2023-10-16 15:20:50 +02:00
override-defaults docs/misc: update to align with Docker Compose v2 (#3295) 2023-05-10 11:02:44 +02:00
auth-ldap.md chore: Adapt ENABLE_LDAP=1 to ACCOUNT_PROVISIONER=LDAP (#3507) 2023-08-29 10:19:03 +12:00
dovecot-master-accounts.md ci(fix): Normalize for .gitattributes + improve eclint coverage (#3566) 2023-10-04 12:53:32 +02:00
full-text-search.md docs/misc: update to align with Docker Compose v2 (#3295) 2023-05-10 11:02:44 +02:00
ipv6.md ci(fix): Normalize for .gitattributes + improve eclint coverage (#3566) 2023-10-04 12:53:32 +02:00
kubernetes.md fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625) 2023-11-10 19:57:17 +01:00
mail-fetchmail.md docs: Fix typos (#3443) 2023-07-27 12:24:36 +12:00
mail-getmail.md feature: adding getmail as an alternative to fetchmail (#2803) 2023-05-23 17:25:08 +02:00
mail-sieve.md ci(fix): Normalize for .gitattributes + improve eclint coverage (#3566) 2023-10-04 12:53:32 +02:00
optional-config.md docs: correct Rspamd directory name (#3629) 2023-11-08 17:57:16 +01:00
podman.md docs/misc: update to align with Docker Compose v2 (#3295) 2023-05-10 11:02:44 +02:00