RE: Roundcube

2023-09-13 Thread Marc
> 
> I am running roundcube and dovecot on the same machine. To avoid the
> described scenario, I have:
> 
> 1. Enabled and configured selinux on that machine,
> 2. Enabled mail-crypt plugin with user keys in dovecot.
> 
> This should make it hard for an attacker to get access to the emails
> even with root access gained through a compromised web server.
> 

That depends on your selinux rules. If you want to go a little further. Use 
podman/docker to run roundcube and run it as a seperate user and give the 
container bind low port capabilities. I think docker/podman support this. Just 
in case juse separate uids with containers. 

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Shared mailbox listing not working

2023-09-13 Thread Yassine Chaouche

Le 9/11/23 à 16:04, exactoph via dovecot a écrit :

Hi there,

Having trouble with shared mailboxes. Followed the documentation, but the IMAP LIST 
doesn't work for mailboxes besides "INBOX" etc.
In the meantime I've switched from file based acl_shared_dict to DB based as 
some people had problems with it. However still no success.

I can see entries in the DB, doveadm acl get ... returns that the mailbox is 
shared, but it is not listed in doveadm mailbox list ...
My configuration: https://pastebin.com/aWnMXJ4J

Help would be very appreciated!
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org



If you made sure that the mailbox is shared,
maybe the other mailbox who wants to access it needs to subscribe first.

Best,

--
Yassine -- sysadm
57 33
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: ACL management from SQL

2023-09-13 Thread Cyril Leclerc
is the http api is automatically up ? do we have to make something ? if
i want to try on the docker machine ?
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: ACL management from SQL

2023-09-13 Thread Aki Tuomi via dovecot


> On 13/09/2023 14:55 EEST Cyril Leclerc  wrote:
> 
>  
> is the http api is automatically up ? do we have to make something ? if
> i want to try on the docker machine ?


service doveadm {
 inet_listener http {
   port = 
 }
}

Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: ACL management from SQL

2023-09-13 Thread Cyril Leclerc
sorry i am newbie, it is not activated by default if we activated
dovecot?

in what file it have to be configured can i test it locally with docker
machine ? development ?

thanks
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org