base.m4: Fiddle with permissions settings for local delivery transports.

diff --git a/base.m4 b/base.m4
index 856ac71..75b1c4c 100644 (file)
--- a/base.m4
+++ b/base.m4
@@ -259,21 +259,32 @@ smtp_local:
 deliver:
        driver = appendfile
        file = /var/mail/$local_part
+       group = mail
+       mode = 0600
+       mode_fail_narrower = false
        USER_DELIVERY
 
 ## Transports for user filters.
 mailbox:
        driver = appendfile
+       initgroups = true
        USER_DELIVERY
 
 maildir:
        driver = appendfile
        maildir_format = true
+       initgroups = true
        USER_DELIVERY
 
 pipe:
        driver = pipe
-       return_output = true
+       path = ${if and {{def:home} {exists{$home/bin}}} {$home/bin:} {}}\
+               /usr/local/bin:/usr/local/sbin:\
+               /usr/bin:/usr/sbin:/bin:/sbin
+       initgroups = true
+       umask = 002
+       return_fail_output = true
+       log_output = true
 
 ## A special dummy transport for use during address verification.
 dummy: