On Mon, Feb 07, 2011 at 01:39:18PM -0500, Daniel Bromberg wrote: > For the sake of curiosity and education, why is running chroot'd Postfix > complicated?
Late binding. Cyrus SASL may dynamically load plugins. Table drivers may dynamically do hostname lookups, CA certificates may need to retrieved, ... The more features you enable that use external libraries, or resources or talk to external services, the more supporting files are needed in the chroot jail... -- Viktor.