On Mon, Feb 07, 2011 at 01:39:18PM -0500, Daniel Bromberg wrote:

> For the sake of curiosity and education, why is running chroot'd Postfix 
> complicated?

Late binding. Cyrus SASL may dynamically load plugins. Table drivers may
dynamically do hostname lookups, CA certificates may need to retrieved, ...

The more features you enable that use external libraries, or resources or
talk to external services, the more supporting files are needed in the
chroot jail...

-- 
        Viktor.

Reply via email to