SPAWN(8)						      System Manager's Manual							  SPAWN(8)

NAME

       spawn - Postfix external command spawner

SYNOPSIS

       spawn [generic Postfix daemon options] command_attributes...

DESCRIPTION

       The  spawn  daemon provides the Postfix equivalent of inetd.  It listens on a port as specified in the Postfix master.cf file and spawns an
       external command whenever a connection is established.  The connection can be made over local IPC (such as  UNIX-domain	sockets)  or  over
       non-local  IPC  (such  as TCP sockets).	The command's standard input, output and error streams are connected directly to the communication
       endpoint.

       This daemon expects to be run from the master(8) process manager.

COMMAND ATTRIBUTE SYNTAX

       The external command attributes are given in the master.cf file at the end of a service definition.  The syntax is as follows:

       user=username (required)

       user=username:groupname
	      The external command is executed with the rights of the specified username.  The software refuses  to  execute  commands	with  root
	      privileges,  or  with the privileges of the mail system owner. If groupname is specified, the corresponding group ID is used instead
	      of the group ID of of username.

       argv=command... (required)
	      The command to be executed. This must be specified as the last command attribute.  The command is executed  directly,  i.e.  without
	      interpretation of shell meta characters by a shell command interpreter.

BUGS

       In  order  to  enforce  standard Postfix process resource controls, the spawn daemon runs only one external command at a time.  As such, it
       presents a noticeable overhead by wasting precious process resources. The spawn daemon is expected to be  replaced  by  a  more	structural
       solution.

DIAGNOSTICS

       The spawn daemon reports abnormal child exits.  Problems are logged to syslogd(8).

SECURITY

       This program needs root privilege in order to execute external commands as the specified user. It is therefore security sensitive.  However
       the spawn daemon does not talk to the external command and thus is not vulnerable to data-driven attacks.

CONFIGURATION PARAMETERS

       The following main.cf parameters are especially relevant to this program. See the Postfix main.cf file for syntax details and  for  default
       values. Use the postfix reload command after a configuration change.

Miscellaneous
       export_environment
	      List of names of environment parameters that can be exported to non-Postfix processes.

       mail_owner
	      The process privileges used while not running an external command.

Resource control
       service_command_time_limit
	      The  amount  of  time the command is allowed to run before it is killed with force. The service name is the name of the entry in the
	      master.cf file. The default time limit is given by the global command_time_limit configuration parameter.

SEE ALSO

       master(8) process manager
       syslogd(8) system logging

LICENSE

       The Secure Mailer license must be distributed with this software.

AUTHOR(S)
       Wietse Venema
       IBM T.J. Watson Research
       P.O. Box 704
       Yorktown Heights, NY 10598, USA

																	  SPAWN(8)