On 27 Apr 2021, at 9:30, Paul Menzel wrote:

I am still wondering, why for example the files in `/etc/postfix` have to be owned by root.

There are tasks which various Postfix executables (notably master, postdrop, postsuper, and postqueue) perform which can only be done by root. How those executables perform those tasks is controlled by the configuration files in /etc/postfix/. If you give some non-root user ownership of those files, you are giving that user root privileges for the scope of what they can be made to do via those configuration files. In other words: changing that ownership would turn an unprivileged user into a privileged user.

--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Reply via email to