Simon Deziel: > I can think of 2 ways to workaround this. One is to tell Apparmor to > grant the tlsproxy process the needed capability and the other is to > have the $queue_directory/private directory perms set to 0710 with the > same owner/group.
Sorry, changes to Postfix permissions are not supported. You are welcome to configure AppArmor etc. so that they will not break legitimate operation of Postfix, but such configuration is considered platform-specific, and outside the scope of Postfix. Wietse