Don't run msmtpd as root
systemd's DynamicUser will automatically allocate a user (named like the service) when the service is started. In order to bind TCP/25, CAP_NET_BIND_SERVICE is granted.
While in there, add some more hardening.
systemd's DynamicUser will automatically allocate a user (named like the service) when the service is started. In order to bind TCP/25, CAP_NET_BIND_SERVICE is granted.
While in there, add some more hardening.