Re: Implications of LMTP socket being world readable and writable (0666) by default

2024-03-31 Thread Aki Tuomi via dovecot
  On 31/03/2024 14:47 EEST da-dovecotlist-15--- via dovecot wrote:     Ah yes. Thank you both. I did not think of just overwriting the `lmtp` socket but was looking for a way to define a new socket with a different name and disable the default one.

Re: Implications of LMTP socket being world readable and writable (0666) by default

2024-03-31 Thread da-dovecotlist-15--- via dovecot
Ah yes. Thank you both. I did not think of just overwriting the `lmtp` socket but was looking for a way to define a new socket with a different name and disable the default one. The main question remains open, though: Is the default setting insecure or am I missing something?

Re: Implications of LMTP socket being world readable and writable (0666) by default

2024-03-31 Thread Aki Tuomi via dovecot
  On 31/03/2024 13:55 EEST da-dovecotlist-15--- via dovecot wrote:     I was surprised to find that the LMTP socket has permission mode 0666 by default and since configs are merged with defaults, there is no way to disable this AFAICS.   #

Re: Implications of LMTP socket being world readable and writable (0666) by default

2024-03-31 Thread Tuomo Soini
On Sun, 31 Mar 2024 12:55:09 +0200 da-dovecotlist-15--- via dovecot wrote: > I was surprised to find that the LMTP socket has permission mode 0666 > by default and since configs are merged with defaults, there is no > way to disable this AFAICS. > > # doveconf -d > ... > service lmtp { >