32 lines
1.1 KiB
Plaintext
32 lines
1.1 KiB
Plaintext
.TH BONGOPOSTDROP 8 "July 2026" "Bongo @BONGO_V_STR@" "Bongo local maildrop"
|
|
.SH NAME
|
|
bongopostdrop \(em atomically commit a local Bongo submission
|
|
.SH SYNOPSIS
|
|
.B bongopostdrop
|
|
.SH DESCRIPTION
|
|
.B bongopostdrop
|
|
is the restricted privilege-separation helper used by
|
|
.BR bongo-sendmail (1).
|
|
It accepts only Bongo's length-delimited local-submission protocol on standard
|
|
input, validates all envelope fields and bounds, and atomically commits the
|
|
record to the protected Bongo maildrop.
|
|
.PP
|
|
This command is not a general-purpose Queue client. It does not read the
|
|
Bongo system credential, contact SMTP, or accept command-line paths. The
|
|
Bongo Queue agent claims and revalidates each record before creating its
|
|
private Queue control and data files.
|
|
.SH SECURITY
|
|
The installed executable must be owned by
|
|
.B root:bongopostdrop
|
|
and have mode 2755. The maildrop directory is owned by the Bongo service
|
|
account and the
|
|
.B bongopostdrop
|
|
group with mode 1730. Do not grant users direct membership in that group.
|
|
.SH FILES
|
|
.TP
|
|
.I @XPL_DEFAULT_MAILDROP_DIR@
|
|
Protected local maildrop.
|
|
.SH SEE ALSO
|
|
.BR bongo-sendmail (1),
|
|
.BR bongoqueue (8)
|