Viktor Dukhovni via Postfix-users:
> On Mon, Sep 28, 2026 at 10:47:32AM -0400, Wietse Venema via Postfix-users
> wrote:
>
> > The plan is for the postdmux server program to retrieve the per-UID
> > request concurrency from the anvil(8) service, and to enforce a
> > per-UID request concurrency limit.
>
> Makes sense I think, since Postfix being down is not a normal state of
> affairs in multi-user mode, so anvil should generally be available.
>
> Do MAIL_CONFIG values need to be restricted to registered instances
> for most users? Any exceptions for "root" and "postfix"?
I don't recall that "postfix" is presently exempted.
It's easy to exclude root from the postdmux indirection.
if (getuid() == 0 || getegid() == var_sgid_gid)
execute existing postdrop, postlog, or postqueue code.
} else {
call postdmux, wich requieres authorized MAIL_CONFIG...
}
With postlog and postqueue, that would be the only change needed.
This should also work with PID=1 Postfix containers which have
no non-root users.
Wietse
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
