search

trusteddomainproject / OpenDKIM

Other
97 stars 52 forks source link

RequireSafeKeys false does not quiet "key data is not secure..." log messages #124

Closed myfirstnameispaul closed 1 year ago

myfirstnameispaul commented 3 years ago

With RequireSafeKeys false in opendkim.conf, I am still getting the message:

opendkim [7812]: example.com: key data is not secure: /home/user-data is writeable and owned by uid 1001 which is not the executing uid (118) or the superuser

Is there any way to quiet this?

thegushi commented 1 year ago

There is not. You can put the keys into a fully safe path, or chown them to opendkim. All requiresafekeys does is change this from an error (which makes it refuse to use the keys) into a warning.

This is cryptographic material, caution is warranted here.