Il 03/09/2007 2:16, Dallman Ross ha scritto:
You need to write to log as the privileged user but save the
file to the user's dir after dropping privileges.
There are lots of ways to do that.
Ok thanks, I think I got what I needed by changing the order of lines in
/etc/procmailrc, which now looks like this:
LOGFILE=/var/log/procmail.log
DROPPRIVS=yes
DEFAULT=$HOME/Maildir/
Anyway, the only difference I noticed without DROPPRIVS is that
delivered mail files belonged to the "mail" group, instead of the
primary user group; but it actually didn't affect security, AFAICT,
because the files are created with no permissions at all for the group,
only rw for the user.
--
Ciao,
Marco.
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail