On Wed, 2003-07-30 at 17:05, Bill Tangren wrote:
> I recommend placing the logs in a subdirectory of the user's home 
> directory. Make sure all the files (.procmailrc, log, etc. are owned by 

That is not an option. I am talking about virtual mail domains and email
accounts here, not of actual linux users. The setup looks like this:

linux user 'vmail1' 
  |
  +-- virtual domain 'vdomain1.dom'
          |
          +-- email account '[EMAIL PROTECTED]'
          |
          +--  email account '[EMAIL PROTECTED]'

So I have files 

  /home/vmail1/users/foo/.procmailrc
  /home/vmail1/users/bar/.procmailrc

Which are both owned by linux user vmail1. The email accounts do not
relate to linux users in any way: Mr. John Doe might have an email
account [EMAIL PROTECTED], but he does not have to have a shell account
in the linux system.

Besides, for means of rotating logs with logrotate it is very practical
to have the logs in one place.

> One thing good about this approach is that information about what email 
> each user is getting is not public knowledge, as it might be if you put 
> the logs a public place (e.g. /var/log).

The logs are being owned by user 'vmail1', not any real linux user.

As there are no actual other real user accounts than ones for sysadmins
on the box, it is not a serious problem. I am just curious why the
procmail process owned by user vmail1 cannot write to the logs which are
writable for a group that the user belongs to.

Regards,
Peter



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to