Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

exim: set User= but run as root

Browse Source 
LoadCredential= will set the owner of $CREDENTIALS_DIRECTORY and the
credentials to User=.  As currently Exim is currently has to be run as
root in order to use the standard SMTP port and for local deliveries[1],
set User=exim, but run all processes as root.

[1]: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-security_considerations.html#SECID270
This commit is contained in:
tv 2022-01-04 20:30:02 +01:00
parent d7edeeac50
commit e82cbd6f35
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
krebs/3modules/exim.nix
View File

@ -65,8 +65,9 @@ in {
config.environment.etc."exim.conf".source
];
serviceConfig = {
ExecStart = "${pkgs.exim}/bin/exim -bdf -q30m";
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
ExecStart = "+${pkgs.exim}/bin/exim -bdf -q30m";
ExecReload = "+${pkgs.coreutils}/bin/kill -HUP $MAINPID";
User = cfg.user.name;
};
wantedBy = [ "multi-user.target" ];
};