On 7/10/24 20:35, Eray Aslan via Postfix-users wrote:
The maintainer of the Debian (and by descent, Ubuntu) Postfix package
long ago decided to take advantage of Postfix's support for chroot by
enabling it on more components of Postfix than the defaults. That
Yes, and it is difficult to change a default value/config once you
introduce it to your users. There are a lot of systems out there and any
migration path you choose will likely break one. It takes care and is
costly. So, one typically avoids doing that and accepts the cost of,
hopefully infrequent, explanation/help.
If Debian wanted to revert the chroot settings they could and it would
not be as drastic as you make it out to be. The primary change is
simply a setting in master.cf which, when one updates, is kept for the
new release, so if the packaged master.cf is changed to turn chroot off
then those who are using it now will retain their current master.cf with
chroot on and should be unaffected, but new installs would now have it
off by default.
The somewhat more difficult aspect of the change would be to phase out
maintenance of the chroot environment. There are ways to work that as
well so that existing users will have that set up by default and new
installs would not but I won't go into that here because it's a systemd
/ packaging issue rather than a postfix issue.
At the end of the day I believe that the Debian maintainers continue to
ship a default configuration of enabling chroot because they want to,
not because of any difficulty in making the change.
Peter
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
