On Sat, Apr 11, 2015 at 04:46:50PM +0000, Viktor Dukhovni wrote:
> > Does postfix have similar parameter for postqueue?
>
> http://www.postfix.org/postconf.5.html#authorized_mailq_users
>
> > Also, why postfix set permission to postqueue to world-executable? Why
> > not restrict in to root only so regular user can't flush/see queue
> > contents?
>
> http://www.postfix.org/postconf.5.html#authorized_flush_users
I should add that both parameters are referenced in the postqueue(1)
manpage, under "CONFIGURATION PARAMETERS":
http://www.postfix.org/postqueue.1.html
Available in Postfix version 2.2 and later:
authorized_flush_users (static:anyone)
List of users who are authorized to flush the queue.
authorized_mailq_users (static:anyone)
List of users who are authorized to view the queue.
Similar text also appears in the Postfix sendmail(1) manpage:
ACCESS CONTROLS
Available in Postfix version 2.2 and later:
authorized_flush_users (static:anyone)
List of users who are authorized to flush the queue.
authorized_mailq_users (static:anyone)
List of users who are authorized to view the queue.
authorized_submit_users (static:anyone)
List of users who are authorized to submit mail with the send-
mail(1) command (and with the privileged postdrop(1) helper com-
mand).
In an ideal world, the OP would have read the either the sendmail(1)
or postqueue(1) manpage before posting. :-(
--
Viktor.
