Linux Server Security, Second Edition

This is the Title of the Book, eMatter Edition

Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.

304

|

Chapter 9: Securing Internet Email

you may find this unnerving, so you’ll periodically want to use the listmailbox com-

mand, or lm for short (Example 9-29).

Believe it or not, we’ve done all we need to do with Cyrus IMAP itself for our user

bwooster to be able to receive and read his email (assuming there’s an LDAP record

with a

uid of bwooster): in Cyrus IMAP, creating a new user mailbox has the effect of

creating that user’s IMAP account. But before I move on to the topic of configuring

the Postfix MTA to deliver email to Cyrus IMAP, a few words about Cyrus IMAP

ACLs.

Cyrus IMAP ACLs (and Deleting Mailboxes)

Each mailbox in a Cyrus IMAP system can have one or more ACLs associated with

it, in which each ACL defines which actions a given user may perform on the refer-

enced mailbox or folder. By default, a new mailbox has only one ACL, one that

grants the mailbox’s owner full administrative rights over the mailbox.

Interestingly, you as an administrator have, by default, only “lookup” and “adminis-

ter” rights on the new mailbox: you can look up the name of the mailbox using the

listmailbox command, and you can set ACLs on it. But if you need to delete the mail-

box, you must first create an ACL for the mailbox that grants your administrative

account administrative rights. This is ...