17 

    18 - Non-root usage [madduck@madduck.net]:

    19     - Provide /usr/share/vmm/vmm-{mkdirs,rmdirs,du} setuid wrappers that do

    20       precisely what they have to and no more. The should probably even call

    21       /usr/share/vmm/vmm-wrapper-helper as unprivileged user to parse the

    22       arguments, match them with the database and obtain the actual data to

    23       process, e.g. email@add.ress → home directory mapping from the DB, or

    24       obtaining the set of precreatable maildirs from the config.

    25 

    26     - configset and configure need root, it is questionable whether these

    27       can/should be wrapped, as they will be disabled anyway for Debian, and

    28       they are root-like activities (unlike day-to-day postmaster work).

    29 

    30     - Pascal suggested to use hooks:

    31       07 23:36 <Faxe> zwei config settings handle_dir in domain und account

    32       07 23:37 <Faxe> und dann post-{domain,user}add scripte, die den wrapper aufrufen