On Wed, Jun 16, 2021 at 05:59:16PM -0700, Jeremiah Rothschild wrote:
> To triple check my sanity, I created a brand new VM and confirmed the
> behavior.
> So anyone should be able to easily reproduce this.
> 
> * Fresh CentOS 8.4 install
> * Choose "Minimal" base environment
> * Defaults for everything else
> 
> # yum -y update
> # yum -y install postfix mailx
> # systemctl start postfix
> # echo "somealias: /tmp/somefile" >> /etc/aliases && newaliases
> # echo "test" | mail somealias@localhost
> # ls /tmp/somefile

Just don't assume /tmp or /var/tmp are the same between services.

Postfix on RHEL 8 is configured with private /tmp.  To be exact:
| PrivateTmp=true
| CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT 
CAP_SYS_MODULE
| ProtectSystem=true
| PrivateDevices=true

Bastian

-- 
You!  What PLANET is this!
                -- McCoy, "The City on the Edge of Forever", stardate 3134.0

Reply via email to