Control: tag -1 + moreinfo
Control: severity -1 wishlist

On Sat, 17 Oct 2015 19:58:33 +1100 Russell Coker <[email protected]> wrote:
Package: postfix
Version: 2.11.3-1
Severity: normal

I've just run a tutorial on setting up Postfix.  One thing that can be very 
confusing
is the different path names for chrooted vs non-chrooted programs.  To solve 
this the
following 2 commands allow the same path names to be used by chrooted parts of
Postfix as are used by non-chrooted daemons.

mkdir -p /var/spool/postfix/var/spool
ln -s ../.. /var/spool/postfix/var/spool/postfix

I think that it would be good to include this directory and sym-link in the 
Debian
package.  Then sysadmins won't have to worry about whether a Postfix service is
chrooted or not as the same path will work.

Please don't do this.

There should be no reason to refer to files/sockets within postfix chroot jail
except of a very few specific cases (eg CAdir, which is now handled 
automatically).
If you find yourself referring to some files in chroot, please ask if you're 
doing
it correctly.  For example, if it is about setting up ldap: or mysql: maps, 
please
switch to proxy:ldap: or proxy:mysql: and avoid referring to things inside the
chroot jail.

What's the intended use case where such symlink would be useful?

Thanks,

/mjt

Reply via email to