[ITP] postfix 2.11.3

[Christian Franke]

Corinna Vinschen wrote:
>> See above (It always switches to $mail_owner and does never use
>> chown()).
>>
>>  From postsuper.c:
>>
>> * All file/directory updates must be done as the mail system owner.
>> This
>>     * is because Postfix daemons manipulate the queue with those same
>> * privileges, so directories must be created with the right ownership.
>>
>>
>>>     In theory postsuper should just use the
>>> account it's running under on Cygwin.
>> In (upstream) theory & practice, it should run with least privileges,
>> which is good :-)
> Well, passwd -R is still some mild variation of security by obscurity, and it might not be allowed in some environments.

Further investigation shows that with a few modifications, postsuper 
could be run without passwd -R - except the rare case that the 
hash_queue_depth was changed for already queued messages.


>    But then again, what company would actually use postfix on Cygwin as their MTA?  Never mind,then.

There already is a related warning in the Cygwin/postfix.README file.

Christian