On 2019/08/24 06:37, Martijn van Duren wrote:
> $ cat pkg/DESCR
> filter-dkim is an opensmtpd filter that signs email with a dkim signature.
> $
>
> Since I'm not too familiar with ports I would like to pay special
> attention to the Makefile of both the port as well as the source.
>
> Also, I currently host the release tarballs at my personal server, which
> I also use for generic other stuff and might not always be available.
> If someone from the ports team has a more stable location to host the
> release tarballs let me know.
>
> Furthermore smtpd.conf allows for filters to be run as another user
> (currently undocumented). I know we're tight for uids, but can we
> reserve one for this port, so we can protect the dkim signing key from
> the smtpd users?
Maybe it makes sense to use a shared uid for the other filters, but
it sounds reasonable to assign a new uid for this one.
> Or could it be possible to share a uid with another
> port with similar purpose? E.g. dkimproxy?
Definitely prefer not to do that.
Ports UIDs need a more general solution rather than trying to conserve the
odd 1 or 2 here and there.
No comments:
Post a Comment