Hello, Currently Postfix doesn't document that the nobody user runs piped commands by default. The following patch amends that.
--- postfix/man/man5/aliases.5 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/postfix/man/man5/aliases.5 b/postfix/man/man5/aliases.5 index 628b5d75..c041be11 100644 --- a/postfix/man/man5/aliases.5 +++ b/postfix/man/man5/aliases.5 @@ -85,6 +85,8 @@ mailed back to the sender. The file \fB/usr/include/sysexits.h\fR defines the expected exit status codes. For example, use \fB"|exit 67"\fR to simulate a "user unknown" error, and \fB"|exit 0"\fR to implement an expensive black hole. +.sp +Note that the command is run as the user \fBnobody\fR by default. .IP \fB:include:\fI/file/name\fR Mail is sent to the destinations listed in the named file. Lines in \fB:include:\fR files have the same syntax -- 2.37.1 --- Best, Raymond Li