Hi,
I have a Debian 6 machine running Postfix 2.7.1. The email server works pretty well. I discovered that any non-root user can access to the mail queue using postqueue command just like root. How can I limit this access?
postqueue is a setgid program , that is why non-priv users can see things.
If you want it to run ONLY for root, then as root
IMPORTANT - write down output of
ls -l postqueue
in case something goes wrong so you can revert.
chown root:[postfix user group for your system]
chmod 2750 postqueue.
the 2xxx makes the file setgid, 7 is for the owner (root) and 5 is r-x for the group.
Next be sure no regular users are in the postifx group.