Re: Database password encryption in dbmail.conf

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)

--===============0919942674==
Content-Type: multipart/signed; protocol="application/pgp-signature";
	boundary="=_ce6dff8dd9c6ad2c07ca02e2bee9f9f7"; micalg=pgp-sha256

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)

--=_ce6dff8dd9c6ad2c07ca02e2bee9f9f7
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
 format=flowed

On 2018-07-04 15:54, Reindl Harald wrote:
> Am 04.07.2018 um 15:45 schrieb Thomas Raschbacher:
>> I guess you could write a patch for that, but you would need to
>> make sure that seed is stored somewhere the admins cannot access
>> it, otherwise the whole thing would be pointless (or only making it
>> a bit more complicated for someone who really wants to do it).
>> Alternatively what would probably be easier would be to write a
>> patch to load the database config from a different location, and
>> make that file not readable by your admins (through whichever
>> means) but only readable by root / the dbmail process
> 
> can't work - dbmail-util needs to read it too and so the user invoking
> dbmail-util is able to do the same
> 
Well I *think* you could probably only allow dbmail-util process 
/executable to read the file and no others using SELinux or something 
like that but that seems rather complex .

> either i am admin for a service or not.....
that is what I think too to be honest .. i mean with maildir based 
servers the admins would still have access to all the mails too so ...


--=_ce6dff8dd9c6ad2c07ca02e2bee9f9f7
Content-Type: application/pgp-signature;
 name=signature.asc
Content-Disposition: attachment;
 filename=signature.asc;
 size=833
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
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=qBKe
-----END PGP SIGNATURE-----

--=_ce6dff8dd9c6ad2c07ca02e2bee9f9f7--

--===============0919942674==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
DBmail mailing list
[email protected]
http://lists.nfg.nl/mailman/listinfo/dbmail

--===============0919942674==--