Georg Lauterbach 26214491ef

fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625) ...

* update K8s deployment

Because `allowPrivilegeEscalation` controls SUID/SGID, we require it
when postdrop is invoked.

* correct permissions for maildrop/public

The reason our permissions previously worked out as that in setups where
SUID/SGID worked, the binaries used to place files in these directories
already have SGID set; the current set of permissions makes less sense
(as explained in this comment:
https://github.com/docker-mailserver/docker-mailserver/issues/3619#issuecomment-1793816412)

Since the binaries used to place files inside these directories alredy
have SUID/SGID set, we do not require these bits (or the sticky bit) to
be set on the directories.

* Apply suggestions from code review

---------

Co-authored-by: Brennan Kinney <5098581+polarathene@users.noreply.github.com>

2023-11-10 19:57:17 +01:00

..

content

fix: Drop special bits from Postfix maildrop/ and public/ directory permissions (#3625)

2023-11-10 19:57:17 +01:00

overrides

docs(ci): Deploy Previews (#1988)

2021-05-20 22:24:46 +12:00

mkdocs.yml

docs: Add Dovecot Lua auth guide + required package (#3579)

2023-11-09 10:18:17 +13:00