indimail / indimail-mta

qmail fork with IPV6, TLS, DANE, DKIM, SRS2, SPF, daemontools, qmailanalog, mess822, & ucspi-tcp
https://github.com/indimail/indimail-mta/wiki/0-IndiMail-Wiki
GNU General Public License v3.0
12 stars 3 forks source link

Add privilege qcert for accessing certificates by qmaild, qmailr #44

Closed mbhangui closed 1 year ago

mbhangui commented 1 year ago
  1. cleanq.c, qhpsi.c, qscanq.c: renamed auto_uidc, auto_gidc to auto_uidv, auto_gidv
  2. dknewkey.sh: use qcerts group for certificate group permission
  3. get_uid.c: added qcerts group ID for certificate group permissions
  4. get_uid.c: renamed auto_uidv, auto_gidv to auto_uidi, auto_gidi
  5. get_uid.c: added auto_gidc for qcerts group ID
  6. indimail-mta.spec: added group ID qcerts for certificate group permissions.
  7. perm_list.in: updated group ownership of certs, domainkeys directory to qcerts
  8. qlocal_upgrade.in: add group ID qcerts
  9. qlocal_upgrade.in: updated group id of certs to qcerts
  10. qlocal_upgrade.in: added qcerts as supplementary group for qmaild, qmailr and apache
  11. qmail-poppass.c, sql-database.c: renamed auto_uidv to auto_uidi, auto_gidv to auto_gidi
  12. qmail-showctl.c: renamed auto_uidv to auto_uidi, auto_uidc to auto_uidv, auto_gidv to auto_gidi
  13. qmail-showctl.c: added auto_uidc for qcerts group ID
  14. qmail-sql.c: renamed auto_uidv, auto_gidv to auto_uidi, auto_gidi
  15. smtpd.c: fix dossl function - return on error
  16. svctool.in: use tcpserver -u qmaild for running qmail-smtpd for qcerts supplememtary group
  17. svctool.in: create qcerts group ID and added qcerts as supplementary group for qmailr, qmaild, apache
  18. svctool.in: create certs with root:qcerts owner:group
  19. update_tmprsadh: create rsa/dh parameter files with root:qcerts owner:group
  20. debian/indimail-mta.postinst.in: added --setgroups to set USE_SETGROUPS env variable for qmail-start