The pickup(8) daemon waits for hints that new mail has been
dropped into the maildrop directory, and feeds it into the
Ill-formatted files are deleted without notifying the originator.
This program expects to be run from the master(8) process
The pickup(8) daemon is moderately security sensitive. It runs
with fixed low privilege and can run in a chrooted environment.
However, the program reads files from potentially hostile users.
The pickup(8) daemon opens no files for writing, is careful about
what files it opens for reading, and does not actually touch any data
that is sent to its public service endpoint.
The pickup(8) daemon copies mail from file to the cleanup(8)
daemon. It could avoid message copying overhead by sending a file
descriptor instead of file data, but then the already complex
cleanup(8) daemon would have to deal with unfiltered user data.