https://bugzilla.redhat.com/show_bug.cgi?id=2393738



--- Comment #3 from Mikel Olasagasti Uranga <[email protected]> ---
The spec is correct once the `caddy.service` problem is fixed, but I've a few
questions:

> AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE

Why `CAP_NET_ADMIN` is required?

> %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/smtprelay.ini

wouldn't it better to be 0600 as the file stores passwords?

Also, why run this as root rather than creating a `smtprelay` user/group?


-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
https://bugzilla.redhat.com/show_bug.cgi?id=2393738

Report this comment as SPAM: 
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202393738%23c3

-- 
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to