From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-4.2 required=3.0 tests=ALL_TRUSTED,AWL,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, T_SCC_BODY_TEXT_LINE shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 Received: from localhost (dcvr.yhbt.net [127.0.0.1]) by dcvr.yhbt.net (Postfix) with ESMTP id A5EB41F518 for ; Tue, 16 Jan 2024 11:52:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=80x24.org; s=selector1; t=1705405975; bh=YC50WN+4/4rCwp1WOm1+XRLeBeC1HUjdkZ8Jn+E+Dr0=; h=From:To:Subject:Date:In-Reply-To:References:From; b=bjRN5co7ovk4XAYcOgnATKTtAWbsFrsKdqNbm3vxQwcBG6uUjxy0rbDOT1DcsObzM zstFoGnzpWmIveX+6Cp9KrrlNW70yCXfZdABFFHB0GDrHEpvnnqWZGhSgF7T8zLRG4 SZGG7rAdXxSEJrlzVk3YExiMpdUl/iTzANDcvPi4= From: Eric Wong To: meta@public-inbox.org Subject: [PATCH 2/5] examples/unsubscribe-milter@.service: use KillMode=process Date: Tue, 16 Jan 2024 11:52:52 +0000 Message-ID: <20240116115255.3554317-3-e@80x24.org> In-Reply-To: <20240116115255.3554317-1-e@80x24.org> References: <20240116115255.3554317-1-e@80x24.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit List-Id: This can be a multi-process daemon, but systemd should only kill the top-level one. And also finish a comment about the User having access to the shared private key. --- examples/unsubscribe-milter@.service | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/examples/unsubscribe-milter@.service b/examples/unsubscribe-milter@.service index eb5dcbe4..a68e6e81 100644 --- a/examples/unsubscribe-milter@.service +++ b/examples/unsubscribe-milter@.service @@ -24,7 +24,13 @@ Sockets = unsubscribe-milter.socket # the corresponding PSGI app needs permissions to modify the # mlmmj spool, so we might as well use the same user since +# they both need to read /home/mlmmj/.unsubscribe.key User = mlmmj +# only kill the parent process when using the default Sendmail::PMilter +# postfork dispatcher, children will die naturally when they're done +# with a given message. +KillMode = process + [Install] WantedBy = multi-user.target