Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 2 down vote favorite

I have a linux server with postfix, the emails are delivered locally.

Would it be possible to protect the contents of the mail folders (using encryption or any other means) to forbid everybody (even root) to read the contents of the emails?

share|improve this question
4  
If you don't trust root, fire him and hire someone else. – Michael Hampton Sep 21 '12 at 13:57
I'm root and don't have the intention to fire myself :) The problem is that some people in the company discuss highly confidential and sensitive information via email and I want to assure them that this information remains confidential at all times. – tvs Sep 21 '12 at 15:32
Every company is like that. Handling it is more of a company policy issue than a technology issue. – Michael Hampton Sep 21 '12 at 15:34

1 Answer

up vote 0 down vote

This is not possible in "classic" linux security model. Root always has all permissions. But there are some alternative security models as well. MAC or RBAC for example but you should be administrator to enable them on your server.

share|improve this answer
ok, but these measueres you mention can be circumvented by someone who has the root password, I need something stronger, like using private/public keys (like PGP does) – tvs Sep 21 '12 at 15:29
Well, then use that. End-to-end encryption, where the keys are unknown to anyone but the communication partners, is the only way to ensure that kind of confidentiality. – Ansgar Wiechers Sep 21 '12 at 17:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.