From dd55a9b5a83615aabe1f7bfdb67bca73b2468ec4 Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Fri, 28 Feb 2025 13:39:21 +0200 Subject: [PATCH] auth: Change auth-userdb socket's group to default_internal_group This allows userdb lookups by mail processes even without root privileges. --- src/auth/auth-settings.c | 1 + src/lib-settings/settings-history-core.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/src/auth/auth-settings.c b/src/auth/auth-settings.c index 4022444f68..fa94044df8 100644 --- a/src/auth/auth-settings.c +++ b/src/auth/auth-settings.c @@ -59,6 +59,7 @@ const struct setting_keyvalue auth_service_settings_defaults[] = { { "unix_listener/auth-userdb/type", "userdb" }, { "unix_listener/auth-userdb/mode", "0666" }, { "unix_listener/auth-userdb/user", "$SET:default_internal_user" }, + { "unix_listener/auth-userdb/group", "$SET:default_internal_group" }, { "unix_listener/login\\slogin/path", "login/login" }, { "unix_listener/login\\slogin/type", "login" }, diff --git a/src/lib-settings/settings-history-core.txt b/src/lib-settings/settings-history-core.txt index 1aa1a6c2cd..4b999ecd13 100644 --- a/src/lib-settings/settings-history-core.txt +++ b/src/lib-settings/settings-history-core.txt @@ -1 +1,2 @@ default service/lmtp/service_restart_request_count unlimited 2.4.1 +default service/auth/unix_listener/auth-userdb/unix_listener_group 2.4.1 -- 2.47.3