Am 14.12.2013 16:19, schrieb Danil Smirnov:
> Joni, thank you very much!
> 
> Now I've found several RPMs but I don't know their creators - so they
> are very unsecure for me... May by you can point me to some official
> source for such RPMs?
> 
> Another option is to build postfix from sources...
> 
> Are there any trusted repository for the new postfix versions
> for Centos??? It would be best solution...

define trusted.........

in doubt install rpmbuild, download the src.rpm of CentOS
install it in your user-account as user which results in
the SPEC-File inside ~/rpmbuild/SPECS/ and the other sources
including the postfix-tarball in ~/rpmbuild/SOURCUES/

put the recent postfix-tarball in ~/SOURCES/, edit postfix.spec
and fire up "rpmbuild -bb postfix.spec", a minute later you have
a 100% trustable and recent postfix-rpm under ~/rpmbuild/RPMS
which can be updated with "yum update *.rpm" and reused on as
much machines you have

there are a few steps to init the build-envirnonment
http://wiki.centos.org/HowTos/SetupRpmBuildEnvironment

i prefer doing such things inside a virtual machine the last
6 years, download the generated RPMs from there and place them
in on my own webserver hosting a repo, makes it easy to
snapshot and backup the build-environment and even roll out
a clone on a different infrastructure

in the meantime i maintain any relevant server software with
overrides this way to keep them recent and optimize compiler/hardening
flags

Reply via email to