procmail-fu needed

[Mark Komarinski]

On Mon, Sep 29, 2003 at 01:01:48PM -0400, pll at lanminds.com wrote:
> 
> 
> >>>>> On Mon, 29 Sep 2003, "Mark" == Mark Komarinski wrote:
> 
>   Mark> If I have this as my ~/.procmailrc file, this works fine.
>   Mark> But if I set this up as /etc/procmailrc, the delivered files
>   Mark> are owned by root and not the user it's intended for.
> 
> You could try using INCLUDERC=/etc/procmailrc as one of the first lines 
> in ~/.procmailrc, but I think that's sub-optimal.
> 
> It sounds like what's happening is that the user who invoking 
> procmail is the same user the MTA is running as, root in this case
> (though check that your /etc/procmailrc isn't sgid root?)
>
[...] 
> So, somehow we need to figure out how to get procmail to su to the 
> id of the mail recipient before processing the mail...
> I'm still kind of stumped on how to do that though.

I found the answer.  You can add:

DROPPRIVS=yes

to /etc/procmailrc file and it will parse the remainder of the recipes
as the user it's intended for.

-Mark
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20030929/3bb26671/attachment.bin