From 7813c249ef2025123eddf826c9559923203ad018 Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Wed, 13 Nov 2019 15:25:35 +0000 Subject: [PATCH] nixos/postfix: add missing setgid wrapper This is basically an alias for a special case of postqueue, which already has a setgid wrapper. Would be silly to allow postqueue -p but not mailq. --- nixos/modules/services/mail/postfix.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/nixos/modules/services/mail/postfix.nix b/nixos/modules/services/mail/postfix.nix index d5fd76da970..df438a0c69d 100644 --- a/nixos/modules/services/mail/postfix.nix +++ b/nixos/modules/services/mail/postfix.nix @@ -631,6 +631,14 @@ in setgid = true; }; + security.wrappers.mailq = { + program = "mailq"; + source = "${pkgs.postfix}/bin/mailq"; + group = setgidGroup; + setuid = false; + setgid = true; + }; + security.wrappers.postqueue = { program = "postqueue"; source = "${pkgs.postfix}/bin/postqueue";