Software: Apache/2.2.22 (Debian). PHP/5.6.36 uname -a: Linux h05.hvosting.ua 4.9.110-amd64 #3 SMP Sun Nov 4 16:27:09 UTC 2018 x86_64 uid=1389(h33678) gid=1099(h33678) groups=1099(h33678),502(mgrsecure) Safe-mode: OFF (not secure) /usr/share/doc/dovecot-core/wiki/ drwxr-xr-x |
Viewing file: Select action/file-type: Security tuning =============== Dovecot is pretty secure out-of-the box. It uses multiple processes and privilege separation to isolate different parts from each others in case a security hole is found from one part. Some things you can do more: * Allocate each user their own UID and GID (see <UserIds.txt>) * Use a separate /dovecot-auth/ user for authentication process (see <UserIds.txt>) * You can chroot authentication and mail processes (see <Chrooting.txt>) * Compiling Dovecot with garbage collection ('--with-gc' configure option) fixes at least in theory any security holes caused by double free()s. However this hasn't been tested much and there may be problems. * There are some security related SSL settings (see <SSL.DovecotConfiguration.txt>) * Set 'first/last_valid_uid/gid' settings to contain only the range actually used by mail processes (This file was created from the wiki on 2013-11-24 04:42) |
:: Command execute :: | |
--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by PinoyWH1Z | C99Shell Github | Generation time: 0.0244 ]-- |