On Thu, 2010-07-22 at 15:43 +0100, Timo Sirainen wrote:

> For local UNIX sockets that are 0600 root, the authentication wouldn't
> be necessary. It could internally check that if the listener socket has
> these permissions, it would just announce that doveadm is already
> authenticated.

Or slightly better: It's preauthenticated if the socket is 0600 and its
user matches service doveadm { user }. So if only a single UID is used
for all users, there's no need to start doveadm as root or to
authenticate if both the brain and workers start with same UID.


Reply via email to