![Milter-greylist 套接字始终由 root 拥有?](https://linux22.com/image/878939/Milter-greylist%20%E5%A5%97%E6%8E%A5%E5%AD%97%E5%A7%8B%E7%BB%88%E7%94%B1%20root%20%E6%8B%A5%E6%9C%89%EF%BC%9F.png)
由于某种原因,使用的套接字milter-greylist
始终由 root 拥有,而它应该由milter-greylist
运行于 的用户拥有。所有这些都是从 Ubuntu Server 14.04 下的存储库安装的。我已将用户配置为greylist
并确认守护进程以此方式运行。我遗漏了什么?
编辑:PID 文件获取了正确的用户,但不是套接字。
我的/etc/default/milter-greylist
# Defaults for milter-greylist initscript
# sourced by /etc/init.d/milter-greylist
# installed at /etc/default/milter-greylist by the maintainer scripts
# 2006-08-18 Herbert Straub
# Change to one to enable milter-greylist
# Don't forget to edit the configuration file
# /etc/milter-greylist/greylist.conf
ENABLED=1
PIDFILE="/var/run/milter-greylist.pid"
SOCKET="/var/spool/postfix/var/run/milter-greylist/greylist.sock"
USER="greylist"
# Other options
# OPTIONS=""
我的开始/etc/milter-greylist/
(其余部分未修改)
#
# Simple greylisting config file using the new features
# See greylist2.conf for a more detailed list of available options
#
# $Id: greylist.conf,v 1.48 2010/04/15 07:51:29 manu Exp $
#
pidfile "/var/run/milter-greylist.pid"
dumpfile "/var/lib/milter-greylist/greylist.db" 600
dumpfreq 10m
# For sendmail use the following two lines
# socket "/var/run/milter-greylist/milter-greylist.sock"
# user "smmsp"
# For Postfix uncomment the following two lines and comment out the
# sendmail ones above.
socket "/var/spool/postfix/var/run/milter-greylist/milter-greylist.sock" 660
user "greylist"
# Log milter-greylist activity to a file
#stat ">>/var/milter-greylist/greylist.log" \
# "%T{%Y/%m/%d %T} %d [%i] %r -> %f %S (ACL %A) %Xc %Xe %Xm %Xh\n"
# Same, sent to syslog
#stat "|logger -p local7.info" \
# "%T{%Y/%m/%d %T} %d [%i] %r -> %f %S (ACL %A) %Xc %Xe %Xm %Xh"
# Be verbose (or use -v flag)
#verbose
# Do not tell spammer how long they have to wait
quiet
# MX peering
#peer 192.0.2.17
#peer 192.0.2.18
# Your own network, which should not suffer greylisting
list "my network" addr { 127.0.0.1/8 10.0.0.0/8 192.0.2.0/24 }
答案1
我尝试找到一个好的解决方案,但最后我还是决定在目录上设置组粘性位。这个办法奏效了。