From 7abd7b3da612b0739ccf5e93d8c219f5b0985d35 Mon Sep 17 00:00:00 2001
From: downtownallday <downtownallday@gmail.com>
Date: Thu, 5 Oct 2023 21:53:46 -0400
Subject: [PATCH] Tighten permissions of the shared postfix/dovecot auth socket

---
 setup/mail-users.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup/mail-users.sh b/setup/mail-users.sh
index 3c70024b..f1c5623f 100755
--- a/setup/mail-users.sh
+++ b/setup/mail-users.sh
@@ -102,8 +102,8 @@ ln -sf /etc/dovecot/dovecot-ldap.conf.ext /etc/dovecot/dovecot-userdb-ldap.conf.
 cat > /etc/dovecot/conf.d/99-local-auth.conf << EOF;
 service auth {
   unix_listener auth-postfix {
-    mode = 0666
-    user = postfix
+    mode = 0660
+    user = dovecot
     group = postfix
   }
 }