Index: Notizen/sbin/postfwd
===================================================================
--- Notizen.orig/sbin/postfwd
+++ Notizen/sbin/postfwd
@@ -19,6 +19,7 @@ use POSIX qw(setsid setuid setgid setloc
 use IO::Socket qw(SOCK_STREAM);
 use Net::DNS;
 use Net::Server::Multiplex;
+use Net::Server::Daemonize qw(create_pid_file);
 use vars qw(@ISA);
 @ISA = qw(Net::Server::Multiplex);
 our($TIMEHIRES); our($STORABLE);
@@ -2681,7 +2682,6 @@ if ($opt_daemon) {
 			group            => $net_group,
 			chroot           => $net_chroot ? $net_chroot : undef,
 			setsid           => $opt_daemon ? 1 : undef,
-			pid_file         => $net_pid ? $net_pid : undef,
 			log_level        => $opt_perfmon  ? 0 : ($opt_verbose + 2),
 			log_file         => $opt_perfmon  ? undef : 'Sys::Syslog',
 			syslog_logsock   => $syslog_socktype,
@@ -2736,6 +2736,23 @@ if ($opt_daemon) {
 		log_info "$NAME $VERSION ready for input";
 	};
 
+	# create pid_file ourselves in order to control permissions
+	sub post_configure_hook {
+		my $self = shift;
+		my $prop = $self->{'server'};
+
+		$prop->{'pid_file'} = $net_pid ? $net_pid : undef;
+		umask oct('0022');
+		if ($prop->{'pid_file'}) {
+			if (eval { create_pid_file($prop->{'pid_file'}) }) {
+				$prop->{'pid_file_unlink'} = 1;
+			} else {
+				$self->fatal(my $e = $@);
+			}
+		}
+		umask oct($net_umask);
+	}
+
 	# main loop
 	sub mux_input() {
 
@@ -3637,7 +3654,7 @@ The following arguments will control it'
 	Changes real and effective group to <name>.
 
 	--umask <mask>
-	Changes the umask for filepermissions (unix domain sockets, pidfiles).
+	Changes the umask for filepermissions (unix domain sockets).
 	Attention: This is umask, not chmod - you have to specify the bits that
 	should NOT apply. E.g.: umask 077 equals to chmod 700.
 
Index: Notizen/man/man8/postfwd.8
===================================================================
--- Notizen.orig/man/man8/postfwd.8
+++ Notizen/man/man8/postfwd.8
@@ -1198,7 +1198,7 @@ The following arguments will control it'
 .PP
 .Vb 4
 \&        --umask <mask>
-\&        Changes the umask for filepermissions (unix domain sockets, pidfiles).
+\&        Changes the umask for filepermissions (unix domain sockets).
 \&        Attention: This is umask, not chmod - you have to specify the bits that
 \&        should NOT apply. E.g.: umask 077 equals to chmod 700.
 .Ve
Index: Notizen/doc/postfwd.html
===================================================================
--- Notizen.orig/doc/postfwd.html
+++ Notizen/doc/postfwd.html
@@ -822,7 +822,7 @@ The following arguments will control it'
         Changes real and effective group to &lt;name&gt;.</pre>
 <pre>
         --umask &lt;mask&gt;
-        Changes the umask for filepermissions (unix domain sockets, pidfiles).
+        Changes the umask for filepermissions (unix domain sockets).
         Attention: This is umask, not chmod - you have to specify the bits that
         should NOT apply. E.g.: umask 077 equals to chmod 700.</pre>
 <pre>
Index: Notizen/doc/postfwd.txt
===================================================================
--- Notizen.orig/doc/postfwd.txt
+++ Notizen/doc/postfwd.txt
@@ -876,7 +876,7 @@ DESCRIPTION
             Changes real and effective group to <name>.
 
             --umask <mask>
-            Changes the umask for filepermissions (unix domain sockets, pidfiles).
+            Changes the umask for filepermissions (unix domain sockets).
             Attention: This is umask, not chmod - you have to specify the bits that
             should NOT apply. E.g.: umask 077 equals to chmod 700.