Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package postfix for openSUSE:Factory checked in at 2026-01-14 16:19:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/postfix (Old) and /work/SRC/openSUSE:Factory/.postfix.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "postfix" Wed Jan 14 16:19:28 2026 rev:259 rq:1327227 version:3.10.7 Changes: -------- --- /work/SRC/openSUSE:Factory/postfix/postfix-bdb.changes 2025-11-28 16:51:06.109661230 +0100 +++ /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes 2026-01-14 16:19:35.496251803 +0100 @@ -1,0 +2,56 @@ +Sun Dec 21 20:53:29 UTC 2025 - Peter Varkoly <[email protected]> + +- (jsc#PED-14859) Fix packages for Immutable Mode - postfix + +------------------------------------------------------------------- +Sun Dec 14 18:45:30 UTC 2025 - Peter Varkoly <[email protected]> + +- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz + +------------------------------------------------------------------- +Thu Dec 11 13:08:02 UTC 2025 - Stefan Botter <[email protected]> + +- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias + from /sbin/postalias to /usr/sbin/postalias + +------------------------------------------------------------------- +Wed Dec 10 20:00:47 UTC 2025 - Arjen de Korte <[email protected]> + +- update to 3.10.7 + * This patch addresses build errors on recent Linux distributions. + With the patch, Postfix builds will run the compiler with a + backwards compatibility option that is supported by Gcc and Clang. + For other compilers, an error message provides hints. + +------------------------------------------------------------------- +Wed Dec 10 14:35:46 UTC 2025 - Wolfgang Frisch <[email protected]> + +- Add /var/spool/mail to the permissions.d drop-in. This directory used to be + whitelisted globally in the permissions package but an update for the exim + mail server changed that (bsc#1254597 bsc#1240755). +- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534. + +------------------------------------------------------------------- +Fri Dec 5 09:37:39 UTC 2025 - Peter Varkoly <[email protected]> + +- postfix is unable to send mail by default (bsc#1253775) + o Clean up the package + * Get rid of config.postfix script to avoid unintentional changes + of the configuration. The sysconfig files mail and postfix + were removed also. + * Deliver the original main.cf and master.cf + * Remove a lot of deprecated stuff from the package. + * Remove the ExecStartPre scripts to maintain the postmaps + and the chroot environment. + * A new ExecStartPre script manages the default alias map which + is part of the default configuration of postfix. + /sbin/postalias /etc/aliases + * Do not use the permissions framework. A new ExecStartPre script + takes care of the right permissions: /usr/sbin/postfix set-permissions + * Remove mkpostfixcert + o Remove patches: + * postfix-master.cf.patch + * postfix-main.cf.patch + * postfix-bdb-main.cf.patch + +------------------------------------------------------------------- --- /work/SRC/openSUSE:Factory/postfix/postfix.changes 2025-11-28 16:51:06.957696940 +0100 +++ /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes 2026-01-14 16:19:36.368281687 +0100 @@ -1,0 +2,57 @@ +Sun Dec 21 20:52:29 UTC 2025 - Peter Varkoly <[email protected]> + +- (jsc#PED-14859) Fix packages for Immutable Mode - postfix + +------------------------------------------------------------------- +Sun Dec 14 18:45:30 UTC 2025 - Peter Varkoly <[email protected]> + +- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz + +------------------------------------------------------------------- +Thu Dec 11 13:06:30 UTC 2025 - Stefan Botter <[email protected]> + +- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias + from /sbin/postalias to /usr/sbin/postalias + +------------------------------------------------------------------- +Wed Dec 10 20:00:47 UTC 2025 - Arjen de Korte <[email protected]> + +- update to 3.10.7 + * This patch addresses build errors on recent Linux distributions. + With the patch, Postfix builds will run the compiler with a + backwards compatibility option that is supported by Gcc and Clang. + For other compilers, an error message provides hints. + +------------------------------------------------------------------- +Wed Dec 10 14:35:23 UTC 2025 - Wolfgang Frisch <[email protected]> + +- Add /var/spool/mail to the permissions.d drop-in. This directory used to be + whitelisted globally in the permissions package but an update for the exim + mail server changed that (bsc#1254597 bsc#1240755). +- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534. + +------------------------------------------------------------------- +Fri Dec 5 09:37:39 UTC 2025 - Peter Varkoly <[email protected]> + +- postfix is unable to send mail by default (bsc#1253775) + o Clean up the package + * Get rid of config.postfix script to avoid unintentional changes + of the configuration. The sysconfig files mail and postfix + were removed also. + * Deliver the original main.cf and master.cf + * Remove a lot of deprecated stuff from the package. + * Remove the ExecStartPre scripts to maintain the postmaps + and the chroot environment. + * A new ExecStartPre script manages the default alias map which + is part of the default configuration of postfix. + /sbin/postalias /etc/aliases + * Do not use the permissions framework. A new ExecStartPre script + takes care of the right permissions: /usr/sbin/postfix set-permissions + * Remove mkpostfixcert + * Get rid of berkley db converting scripts + o Remove patches: + * postfix-master.cf.patch + * postfix-main.cf.patch + * postfix-bdb-main.cf.patch + +------------------------------------------------------------------- Old: ---- postfix-3.10.6.tar.gz postfix-3.10.6.tar.gz.asc postfix-bdb-main.cf.patch postfix-main.cf.patch postfix-master.cf.patch New: ---- postfix-3.10.7.tar.gz postfix-3.10.7.tar.gz.asc ----------(Old B)---------- Old:/work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- * postfix-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes: * postfix-bdb-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- -- /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- * postfix-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes: * postfix-bdb-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- Old:/work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- * postfix-master.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes: * postfix-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- * postfix-bdb-main.cf.patch -- /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- * postfix-master.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes: * postfix-main.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- * postfix-bdb-main.cf.patch Old:/work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- o Remove patches: /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes: * postfix-master.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix-bdb.changes- * postfix-main.cf.patch -- /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- o Remove patches: /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes: * postfix-master.cf.patch /work/SRC/openSUSE:Factory/.postfix.new.1928/postfix.changes- * postfix-main.cf.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postfix-bdb.spec ++++++ --- /var/tmp/diff_new_pack.MM5OLt/_old 2026-01-14 16:19:37.616325349 +0100 +++ /var/tmp/diff_new_pack.MM5OLt/_new 2026-01-14 16:19:37.616325349 +0100 @@ -1,7 +1,7 @@ # # spec file for package postfix-bdb # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -41,12 +41,7 @@ %define vmdir /srv/maildirs %endif %define mail_group mail -%define conf_backup_dir %{_localstatedir}/adm/backup/postfix %define unitdir %{_prefix}/lib/systemd -#Compat macro for new _fillupdir macro introduced in Nov 2017 -%if ! %{defined _fillupdir} - %define _fillupdir %{_localstatedir}/adm/fillup-templates -%endif %if 0%{?suse_version} >= 1320 || ( 0%{?suse_version} == 1315 && 0%{?is_opensuse} ) %bcond_without lmdb %else @@ -59,7 +54,7 @@ %endif %bcond_without ldap Name: postfix-bdb -Version: 3.10.6 +Version: 3.10.7 Release: 0 Summary: A fast, secure, and flexible mailer License: EPL-2.0 OR IPL-1.0 @@ -78,8 +73,6 @@ Patch1: postfix-no-md5.patch Patch2: pointer_to_literals.patch Patch3: ipv6_disabled.patch -Patch4: postfix-bdb-main.cf.patch -Patch5: postfix-master.cf.patch Patch6: postfix-linux45.patch Patch7: postfix-ssl-release-buffers.patch Patch8: postfix-vda-v14-3.0.3.patch @@ -108,8 +101,7 @@ BuildRequires: pkgconfig(systemd) Requires: iproute2 Requires(post): permissions -Requires(pre): %fillup_prereq -Requires(pre): permissions + Conflicts: exim Conflicts: postfix Conflicts: sendmail @@ -133,14 +125,9 @@ Requires: /usr/bin/cmp # /usr/lib/postfix/bin//post-install: line 667: ed: command not found Requires(pre): /usr/bin/ed -Requires(preun):/usr/bin/ed +Requires(preun): /usr/bin/ed Requires(post): /usr/bin/ed -Requires(postun):/usr/bin/ed -# /usr/sbin/config.postfix needs perl -Requires(pre): perl -Requires(preun):perl -Requires(post): perl -Requires(postun):perl +Requires(postun): /usr/bin/ed %description Postfix aims to be an alternative to the widely-used sendmail program with bdb support @@ -172,10 +159,6 @@ export CCARGS="${CCARGS} %{optflags} -fcommon -Wno-comments -Wno-missing-braces -fPIC" -%if 0%{?suse_version} >= 1600 -export CCARGS="${CCARGS} -std=gnu17" -%endif - %ifarch s390 s390x ppc export CCARGS="${CCARGS} -fsigned-char" %endif @@ -284,10 +267,8 @@ install -m 755 bin/$i %{buildroot}%{_sbindir}/$i done mkdir -p %{buildroot}/sbin/conf.d -mkdir -p %{buildroot}%{_sysconfdir}/permissions.d mkdir -p %{buildroot}/%{_libdir}/sasl2 mkdir -p %{buildroot}%{_sbindir} -mkdir -p %{buildroot}/%{conf_backup_dir} mkdir -p %{buildroot}/%{pf_sample_directory} mkdir -p %{buildroot}/%{pf_html_directory} mkdir -p %{buildroot}%{_includedir}/postfix @@ -298,46 +279,12 @@ mkdir -p %{buildroot}%{_sysconfdir}/pam.d install -m 644 postfix-SUSE/smtp %{buildroot}%{_sysconfdir}/pam.d/smtp %endif -mkdir -p %{buildroot}%{_fillupdir} -sed -e 's;@lib@;%{_lib};g' postfix-SUSE/sysconfig.postfix > %{buildroot}%{_fillupdir}/sysconfig.postfix -install -m 644 postfix-SUSE/sysconfig.mail-postfix %{buildroot}%{_fillupdir}/sysconfig.mail-postfix -sed -e 's;@lib@;%{_lib};g' \ - -e 's;@conf_backup_dir@;%{conf_backup_dir};' \ - -e 's;@daemon_directory@;%{pf_daemon_directory};' \ - -e 's;@readme_directory@;%{pf_readme_directory};' \ - -e 's;@html_directory@;%{pf_html_directory};' \ - -e 's;@sendmail_path@;%{pf_sendmail_path};' \ - -e 's;@setgid_group@;%{pf_setgid_group};' \ - -e 's;@manpage_directory@;%{_mandir};' \ - -e 's;@newaliases_path@;%{pf_newaliases_path};' \ - -e 's;@sample_directory@;%{pf_sample_directory};' \ - -e 's;@mailq_path@;%{pf_mailq_path};' postfix-SUSE/config.postfix > %{buildroot}%{_sbindir}/config.postfix -chmod 755 %{buildroot}%{_sbindir}/config.postfix -install -m 644 postfix-SUSE/dynamicmaps.cf %{buildroot}%{_sysconfdir}/postfix/dynamicmaps.cf -install -m 644 postfix-SUSE/ldap_aliases.cf %{buildroot}%{_sysconfdir}/postfix/ldap_aliases.cf -install -m 644 postfix-SUSE/helo_access %{buildroot}%{_sysconfdir}/postfix/helo_access -install -m 644 postfix-SUSE/permissions %{buildroot}%{_sysconfdir}/permissions.d/postfix -install -m 644 postfix-SUSE/sender_canonical %{buildroot}%{_sysconfdir}/postfix/sender_canonical -install -m 644 postfix-SUSE/relay %{buildroot}%{_sysconfdir}/postfix/relay -install -m 644 postfix-SUSE/relay_ccerts %{buildroot}%{_sysconfdir}/postfix/relay_ccerts -install -m 600 postfix-SUSE/sasl_passwd %{buildroot}%{_sysconfdir}/postfix/sasl_passwd mkdir -p %{buildroot}%{_sysconfdir}/sasl2 +mkdir -p %{buildroot}%{_sysconfdir}/permissions.d +install -pm 0644 postfix-SUSE/permissions %{buildroot}%{_sysconfdir}/permissions.d/postfix +install -pm 0644 postfix-SUSE/permissions.paranoid %{buildroot}%{_sysconfdir}/permissions.d/postfix.paranoid + install -m 600 postfix-SUSE/smtpd.conf %{buildroot}%{_sysconfdir}/sasl2/smtpd.conf -install -m 644 postfix-SUSE/openssl_postfix.conf.in %{buildroot}%{_sysconfdir}/postfix/openssl_postfix.conf.in -install -m 755 postfix-SUSE/mkpostfixcert %{buildroot}%{_sbindir}/mkpostfixcert -{ -cat<<EOF -# -# ----------------------------------------------------------------------- -# NOTE: Many parameters have already been added to the end of this file -# by config.postfix. So take care that you don't uncomment -# and set a parameter without checking whether it has been added -# to the end of this file. -# ----------------------------------------------------------------------- -# -EOF -cat conf/main.cf -} > %{buildroot}%{_sysconfdir}/postfix/main.cf %{buildroot}%{_sbindir}/postconf -c %{buildroot}%{_sysconfdir}/postfix \ -e "manpage_directory = %{_mandir}" \ "setgid_group = %{pf_setgid_group}" \ @@ -353,10 +300,6 @@ "disable_vrfy_command = yes" \ 'smtpd_banner = $myhostname ESMTP' #Set Permissions -install -m 644 postfix-SUSE/postfix-files %{buildroot}%{pf_shlib_directory}/postfix-files -# create paranoid permissions file -printf '%%-38s %%-18s %%s\n' %{_sbindir}/postdrop "root.%{pf_setgid_group}" "0755" >> %{buildroot}%{_sysconfdir}/permissions.d/postfix.paranoid -printf '%%-38s %%-18s %%s\n' %{_sbindir}/postqueue "root.%{pf_setgid_group}" "0755" >> %{buildroot}%{_sysconfdir}/permissions.d/postfix.paranoid install -m 644 include/*.h %{buildroot}%{_includedir}/postfix/ # some rpmlint stuff # remove unneeded examples/chroot-setup @@ -375,11 +318,8 @@ mkdir -p %{buildroot}%{_unitdir} mkdir -p %{buildroot}%{pf_shlib_directory}/systemd install -m 0644 postfix-SUSE/postfix.service %{buildroot}%{_unitdir}/postfix.service -install -m 0755 postfix-SUSE/config_postfix.systemd %{buildroot}%{pf_shlib_directory}/systemd/config_postfix install -m 0755 postfix-SUSE/update_chroot.systemd %{buildroot}%{pf_shlib_directory}/systemd/update_chroot -install -m 0755 postfix-SUSE/update_postmaps.systemd %{buildroot}%{pf_shlib_directory}/systemd/update_postmaps install -m 0755 postfix-SUSE/wait_qmgr.systemd %{buildroot}%{pf_shlib_directory}/systemd/wait_qmgr -install -m 0755 postfix-SUSE/cond_slp.systemd %{buildroot}%{pf_shlib_directory}/systemd/cond_slp %if 0%{?suse_version} < 1599 ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rcpostfix %endif @@ -402,7 +342,6 @@ %endif #Clean up for postfix-bdb -rm -rf %{buildroot}/etc/postfix/ldap_aliases.cf rm -rf %{buildroot}/usr/lib/debug/usr/lib/postfix/postfix-ldap.so-3.5.8-2.11.1.x86_64.debug rm -rf %{buildroot}/usr/lib/debug/usr/lib/postfix/postfix-mysql.so-3.5.8-2.11.1.x86_64.debug rm -rf %{buildroot}/usr/lib/debug/usr/lib/postfix/postfix-pgsql.so-3.5.8-2.11.1.x86_64.debug @@ -445,35 +384,18 @@ # --------------------------------------------------------------------------- %post -# We never have to run suseconfig for postfix after installation -# We only start postfix own upgrade-configuration by update -if [ ${1:-0} -gt 1 ]; then - touch %{_localstatedir}/adm/postfix.configured - echo "Executing upgrade-configuration." - %{_sbindir}/postfix set-permissions upgrade-configuration setgid_group=%{pf_setgid_group} || : - if [ "$(%{_sbindir}/postconf -h daemon_directory)" != "%{pf_daemon_directory}" ]; then - %{_sbindir}/postconf daemon_directory=%{pf_daemon_directory} - fi -fi - %service_add_post postfix.service - +/sbin/ldconfig %set_permissions %{_sbindir}/postdrop %set_permissions %{_sbindir}/postlog %set_permissions %{_sbindir}/postqueue -%set_permissions %{_sysconfdir}/postfix/sasl_passwd -%set_permissions %{_sbindir}/sendmail - -%{fillup_only postfix} -%{fillup_only -an mail} -/sbin/ldconfig +%set_permissions /var/spool/mail/ %verifyscript -%verify_permissions -e %{_sbindir}/postdrop -%verify_permissions -e %{_sbindir}/postlog -%verify_permissions -e %{_sbindir}/postqueue -%verify_permissions -e %{_sysconfdir}/postfix/sasl_passwd -%verify_permissions -e %{_sbindir}/sendmail +%verify_permissions %{_sbindir}/postdrop +%verify_permissions %{_sbindir}/postlog +%verify_permissions %{_sbindir}/postqueue +%verify_permissions -e /var/spool/mail/ %postun %service_del_postun postfix.service @@ -489,28 +411,13 @@ %else %config %{_sysconfdir}/pam.d/* %endif -%{_fillupdir}/sysconfig.postfix -%{_fillupdir}/sysconfig.mail-postfix %dir %{_sysconfdir}/postfix -%config %{_sysconfdir}/postfix/main.cf.default -%config(noreplace) %{_sysconfdir}/postfix/[^mysql]*[^mysql] -%config(noreplace) %{_sysconfdir}/postfix/access -%config(noreplace) %{_sysconfdir}/postfix/aliases -%config(noreplace) %{_sysconfdir}/postfix/canonical -%config(noreplace) %{_sysconfdir}/postfix/header_checks -%config(noreplace) %{_sysconfdir}/postfix/helo_access -%config(noreplace) %{_sysconfdir}/postfix/main.cf -%config(noreplace) %{_sysconfdir}/postfix/master.cf +%exclude %{_sysconfdir}/postfix/*mysql* +%config(noreplace) %{_sysconfdir}/postfix/* %attr(0750,root,root) %config %{_sysconfdir}/postfix/post-install %attr(0750,root,root) %config %{_sysconfdir}/postfix/postfix-tls-script %attr(0750,root,root) %config %{_sysconfdir}/postfix/postfix-wrapper %attr(0750,root,root) %config %{_sysconfdir}/postfix/postmulti-script -%config(noreplace) %{_sysconfdir}/postfix/postfix-files -%config(noreplace) %{_sysconfdir}/postfix/relay -%config(noreplace) %{_sysconfdir}/postfix/relay_ccerts -%config(noreplace) %{_sysconfdir}/postfix/sasl_passwd -%config(noreplace) %{_sysconfdir}/postfix/sender_canonical -%config(noreplace) %{_sysconfdir}/postfix/virtual %dir %{_sysconfdir}/sasl2 %config(noreplace) %{_sysconfdir}/sasl2/smtpd.conf @@ -532,7 +439,6 @@ %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postdrop %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postlog %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postqueue -%attr(0755,root,root) %{_sbindir}/config.postfix %attr(0755,root,root) %{_sbindir}/sendmail %attr(0755,root,root) %{_sbindir}/postalias %attr(0755,root,root) %{_sbindir}/postcat @@ -548,9 +454,7 @@ %attr(0755,root,root) %{_sbindir}/qmqp-source %attr(0755,root,root) %{_sbindir}/smtp-sink %attr(0755,root,root) %{_sbindir}/smtp-source -%attr(0755,root,root) %{_sbindir}/mkpostfixcert %attr(0755,root,root) %{_sbindir}/check_mail_queue -%attr(0755,root,root) %{_sbindir}/config.postfix %if 0%{?suse_version} < 1599 %{_sbindir}/rcpostfix %endif @@ -567,7 +471,6 @@ %{pf_shlib_directory}/main.cf.proto %{pf_shlib_directory}/master.cf.proto -%{conf_backup_dir} %dir %attr(0700,postfix,root) %{pf_data_directory} %exclude %{_mandir}/man5/ldap_table.5* %exclude %{_mandir}/man5/lmdb_table.5* ++++++ postfix.spec ++++++ --- /var/tmp/diff_new_pack.MM5OLt/_old 2026-01-14 16:19:37.676327845 +0100 +++ /var/tmp/diff_new_pack.MM5OLt/_new 2026-01-14 16:19:37.680328012 +0100 @@ -1,7 +1,7 @@ # # spec file for package postfix # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -35,12 +35,7 @@ %define pf_data_directory %{_localstatedir}/lib/%{name} %define pf_database_convert %{_rundir}/%{name}-needs-convert %define mail_group mail -%define conf_backup_dir %{_localstatedir}/adm/backup/%{name} %define unitdir %{_prefix}/lib/systemd -#Compat macro for new _fillupdir macro introduced in Nov 2017 -%if ! %{defined _fillupdir} - %define _fillupdir %{_localstatedir}/adm/fillup-templates -%endif %if 0%{?suse_version} < 1599 %bcond_without libnsl %else @@ -48,7 +43,7 @@ %endif %bcond_without ldap Name: postfix -Version: 3.10.6 +Version: 3.10.7 Release: 0 Summary: A fast, secure, and flexible mailer License: EPL-2.0 OR IPL-1.0 @@ -66,8 +61,6 @@ Patch1: %{name}-no-md5.patch Patch2: pointer_to_literals.patch Patch3: ipv6_disabled.patch -Patch4: %{name}-main.cf.patch -Patch5: %{name}-master.cf.patch Patch6: %{name}-linux45.patch Patch7: %{name}-ssl-release-buffers.patch Patch8: %{name}-vda-v14-3.0.3.patch @@ -95,9 +88,8 @@ BuildRequires: pkgconfig(systemd) Requires: iproute2 Requires(post): permissions -Requires(pre): %fillup_prereq + Requires(pre): group(%{mail_group}) -Requires(pre): permissions Requires(pre): user(nobody) Conflicts: exim Conflicts: postfix-bdb @@ -117,14 +109,9 @@ Requires: /usr/bin/cmp # /usr/lib/postfix/bin//post-install: line 667: ed: command not found Requires(pre): /usr/bin/ed -Requires(preun):/usr/bin/ed +Requires(preun): /usr/bin/ed Requires(post): /usr/bin/ed -Requires(postun):/usr/bin/ed -# /usr/sbin/config.postfix needs perl -Requires(pre): perl -Requires(preun):perl -Requires(post): perl -Requires(postun):perl +Requires(postun): /usr/bin/ed %description Postfix aims to be an alternative to the widely-used sendmail program. @@ -151,7 +138,6 @@ Summary: Postfix plugin to support MySQL maps Group: Productivity/Networking/Email/Servers Requires(pre): %{name} = %{version} -%sysusers_requires %if 0%{?suse_version} < 1550 Provides: group(vmail) %endif @@ -193,10 +179,6 @@ export CCARGS="${CCARGS} %{optflags} -fcommon -Wno-comments -Wno-missing-braces -fPIC" -%if 0%{?suse_version} >= 1600 -export CCARGS="${CCARGS} -std=gnu17" -%endif - %ifarch s390 s390x ppc export CCARGS="${CCARGS} -fsigned-char" %endif @@ -275,10 +257,6 @@ %install mkdir -p %{buildroot}/%{_libdir} mkdir -p %{buildroot}%{_sysconfdir}/%{name} -# create our default postfix ssl DIR (/etc/postfix/ssl) -mkdir -p %{buildroot}%{_sysconfdir}/%{name}/ssl/certs -# link cacerts to /etc/ssl/certs -ln -s ../../ssl/certs %{buildroot}%{_sysconfdir}/%{name}/ssl/cacerts cp lib/lib%{name}-* %{buildroot}/%{_libdir} export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:%{buildroot}/%{_libdir} sh postfix-install -non-interactive \ @@ -304,7 +282,6 @@ mkdir -p %{buildroot}%{_sysconfdir}/permissions.d mkdir -p %{buildroot}/%{_libdir}/sasl2 mkdir -p %{buildroot}%{_sbindir} -mkdir -p %{buildroot}/%{conf_backup_dir} mkdir -p %{buildroot}/%{pf_sample_directory} mkdir -p %{buildroot}/%{pf_html_directory} mkdir -p %{buildroot}%{_includedir}/%{name} @@ -318,46 +295,8 @@ mkdir -p %{buildroot}/%{pf_queue_directory} mkdir -p %{buildroot}/var/spool/mail ln -s spool/mail %{buildroot}/var/mail -mkdir -p %{buildroot}%{_fillupdir} -sed -e 's;@lib@;%{_lib};g' %{name}-SUSE/sysconfig.%{name} > %{buildroot}%{_fillupdir}/sysconfig.%{name} -install -pm 0644 %{name}-SUSE/sysconfig.mail-%{name} %{buildroot}%{_fillupdir}/sysconfig.mail-%{name} -sed -e 's;@lib@;%{_lib};g' \ - -e 's;@conf_backup_dir@;%{conf_backup_dir};' \ - -e 's;@daemon_directory@;%{pf_daemon_directory};' \ - -e 's;@readme_directory@;%{pf_readme_directory};' \ - -e 's;@html_directory@;%{pf_html_directory};' \ - -e 's;@sendmail_path@;%{pf_sendmail_path};' \ - -e 's;@setgid_group@;%{pf_setgid_group};' \ - -e 's;@manpage_directory@;%{_mandir};' \ - -e 's;@newaliases_path@;%{pf_newaliases_path};' \ - -e 's;@sample_directory@;%{pf_sample_directory};' \ - -e 's;@mailq_path@;%{pf_mailq_path};' %{name}-SUSE/config.%{name} > %{buildroot}%{_sbindir}/config.%{name} -chmod 0755 %{buildroot}%{_sbindir}/config.%{name} -install -pm 0644 %{name}-SUSE/ldap_aliases.cf %{buildroot}%{_sysconfdir}/%{name}/ldap_aliases.cf -install -pm 0644 %{name}-SUSE/helo_access %{buildroot}%{_sysconfdir}/%{name}/helo_access -install -pm 0644 %{name}-SUSE/permissions %{buildroot}%{_sysconfdir}/permissions.d/%{name} -install -pm 0644 %{name}-SUSE/sender_canonical %{buildroot}%{_sysconfdir}/%{name}/sender_canonical -install -pm 0644 %{name}-SUSE/relay %{buildroot}%{_sysconfdir}/%{name}/relay -install -pm 0644 %{name}-SUSE/relay_ccerts %{buildroot}%{_sysconfdir}/%{name}/relay_ccerts -install -pm 0644 %{name}-SUSE/relay_recipients %{buildroot}%{_sysconfdir}/%{name}/relay_recipients -install -pm 0600 %{name}-SUSE/sasl_passwd %{buildroot}%{_sysconfdir}/%{name}/sasl_passwd mkdir -p %{buildroot}%{_sysconfdir}/sasl2 install -pm 0600 %{name}-SUSE/smtpd.conf %{buildroot}%{_sysconfdir}/sasl2/smtpd.conf -install -pm 0644 %{name}-SUSE/openssl_%{name}.conf.in %{buildroot}%{_sysconfdir}/%{name}/openssl_%{name}.conf.in -install -pm 0755 %{name}-SUSE/mk%{name}cert %{buildroot}%{_sbindir}/mk%{name}cert -{ -cat<<EOF -# -# ----------------------------------------------------------------------- -# NOTE: Many parameters have already been added to the end of this file -# by config.postfix. So take care that you don't uncomment -# and set a parameter without checking whether it has been added -# to the end of this file. -# ----------------------------------------------------------------------- -# -EOF -cat conf/main.cf -} > %{buildroot}%{_sysconfdir}/%{name}/main.cf %{buildroot}%{_sbindir}/postconf -c %{buildroot}%{_sysconfdir}/%{name} \ -e "manpage_directory = %{_mandir}" \ "setgid_group = %{pf_setgid_group}" \ @@ -373,6 +312,8 @@ "disable_vrfy_command = yes" \ 'smtpd_banner = $myhostname ESMTP' #Set Permissions +install -pm 0644 %{name}-SUSE/permissions %{buildroot}%{_sysconfdir}/permissions.d/%{name} +install -pm 0644 %{name}-SUSE/permissions.paranoid %{buildroot}%{_sysconfdir}/permissions.d/%{name}.paranoid sed -i -e 's/\(.*ldap.*\)/#\1/g' \ -e 's/\(.*mysql.*\)/#\1/g' \ -e 's/\(.*pgsql.*\)/#\1/g' \ @@ -385,9 +326,6 @@ # postfix-mysql install -pm 0644 %{name}-mysql/main.cf-mysql %{buildroot}%{_sysconfdir}/%{name}/main.cf-mysql install -pm 0640 %{name}-mysql/*_maps.cf %{buildroot}%{_sysconfdir}/%{name}/ -# create paranoid permissions file -printf '%%-38s %%-18s %%s\n' %{_sbindir}/postdrop "root.%{pf_setgid_group}" "0755" >> %{buildroot}%{_sysconfdir}/permissions.d/%{name}.paranoid -printf '%%-38s %%-18s %%s\n' %{_sbindir}/postqueue "root.%{pf_setgid_group}" "0755" >> %{buildroot}%{_sysconfdir}/permissions.d/%{name}.paranoid install -pm 0644 include/*.h %{buildroot}%{_includedir}/%{name}/ # some rpmlint stuff # remove unneeded examples/chroot-setup @@ -406,11 +344,7 @@ mkdir -p %{buildroot}%{_unitdir}/mail-transfer-agent.target.wants/ mkdir -p %{buildroot}%{pf_systemd_directory} install -pm 0644 %{name}-SUSE/%{name}.service %{buildroot}%{_unitdir}/%{name}.service -install -pm 0755 %{name}-SUSE/config_%{name}.systemd %{buildroot}%{pf_systemd_directory}/config_%{name} -install -pm 0755 %{name}-SUSE/update_chroot.systemd %{buildroot}%{pf_systemd_directory}/update_chroot -install -pm 0755 %{name}-SUSE/update_postmaps.systemd %{buildroot}%{pf_systemd_directory}/update_postmaps install -pm 0755 %{name}-SUSE/wait_qmgr.systemd %{buildroot}%{pf_systemd_directory}/wait_qmgr -install -pm 0755 %{name}-SUSE/cond_slp.systemd %{buildroot}%{pf_systemd_directory}/cond_slp %if 0%{?suse_version} < 1599 ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name} %endif @@ -447,67 +381,27 @@ # --------------------------------------------------------------------------- %pre -f postfix.pre -# If existing default database type is hash, we need to convert the -# databases because hash (and btree) is no longer supported after -# the upgrade -if [ -x %{_sbindir}/postconf ]; then - DEF_DB_TYPE=$(postconf default_database_type) - case $DEF_DB_TYPE in *hash) - touch %{pf_database_convert} - esac -fi %service_add_pre %{name}.service %preun %service_del_preun %{name}.service %post -# We never have to run suseconfig for postfix after installation -# We only start postfix own upgrade-configuration by update -# -# If the default database type of the previous installation was -# hash, we also need to rebuild the databases in the new lmdb -# format -if [ ${1:-0} -gt 1 ]; then - touch %{_localstatedir}/adm/%{name}.configured - echo "Executing upgrade-configuration." - %{_sbindir}/%{name} set-permissions upgrade-configuration setgid_group=%{pf_setgid_group} || : - if [ "$(%{_sbindir}/postconf -h daemon_directory)" != "%{pf_daemon_directory}" ]; then - %{_sbindir}/postconf daemon_directory=%{pf_daemon_directory} - fi - if [ -e %{pf_database_convert} ]; then - sed -i -E "s/(btree|hash):/lmdb:/g" %{pf_config_directory}/{main.cf,master.cf} - for i in $(find %{pf_config_directory} -name "*.db"); do - postmap ${i%.db} - done - for i in $(find %{_sysconfdir}/aliases.d/ -name "*.db"); do - postalias ${i%.db} - done - if [ -e %{_sysconfdir}/aliases.db ]; then - postalias %{_sysconfdir}/aliases - fi - rm %{pf_database_convert} - fi -fi +%service_add_post %{name}.service %set_permissions %{_sbindir}/postdrop %set_permissions %{_sbindir}/postlog %set_permissions %{_sbindir}/postqueue -%set_permissions %{_sysconfdir}/%{name}/sasl_passwd -%set_permissions %{_sbindir}/sendmail -%{fillup_only postfix} -%{fillup_only -an mail} -%service_add_post %{name}.service +%set_permissions /var/spool/mail/ + +%verifyscript +%verify_permissions %{_sbindir}/postdrop +%verify_permissions %{_sbindir}/postlog +%verify_permissions %{_sbindir}/postqueue +%verify_permissions -e /var/spool/mail/ %postun %service_del_postun %{name}.service -%verifyscript -%verify_permissions -e %{_sbindir}/postdrop -%verify_permissions -e %{_sbindir}/postlog -%verify_permissions -e %{_sbindir}/postqueue -%verify_permissions -e %{_sysconfdir}/%{name}/sasl_passwd -%verify_permissions -e %{_sbindir}/sendmail - # --------------------------------------------------------------------------- %pre mysql -f vmail.pre @@ -524,51 +418,35 @@ %files %license LICENSE TLS_LICENSE %doc RELEASE_NOTES +%exclude %{_sysconfdir}/%{name}/*mysql* +%exclude %{_sysconfdir}/%{name}/LICENSE +%exclude %{_sysconfdir}/%{name}/TLS_LICENSE +%exclude %{_mandir}/man5/ldap_table.5* +%exclude %{_mandir}/man5/mysql_table.5* +%exclude %{_mandir}/man5/pgsql_table.5* %if 0%{?suse_version} >= 1600 %{_pam_vendordir}/smtp %else %config %{_sysconfdir}/pam.d/* %endif -%{_fillupdir}/sysconfig.%{name} -%{_fillupdir}/sysconfig.mail-%{name} %dir %{_sysconfdir}/%{name} -%config %{_sysconfdir}/%{name}/main.cf.default -%config(noreplace) %{_sysconfdir}/%{name}/[^mysql]*[^mysql] -%config(noreplace) %{_sysconfdir}/%{name}/access -%config(noreplace) %{_sysconfdir}/%{name}/aliases -%config(noreplace) %{_sysconfdir}/%{name}/canonical -%config(noreplace) %{_sysconfdir}/%{name}/header_checks -%config(noreplace) %{_sysconfdir}/%{name}/helo_access -%config(noreplace) %{_sysconfdir}/%{name}/main.cf -%config(noreplace) %{_sysconfdir}/%{name}/master.cf -%config(noreplace) %{_sysconfdir}/%{name}/relay -%config(noreplace) %{_sysconfdir}/%{name}/relay_ccerts -%config(noreplace) %{_sysconfdir}/%{name}/relay_recipients -%config(noreplace) %{_sysconfdir}/%{name}/sasl_passwd -%config(noreplace) %{_sysconfdir}/%{name}/sender_canonical -%config(noreplace) %{_sysconfdir}/%{name}/virtual +%config(noreplace) %{_sysconfdir}/%{name}/* %ghost %attr(0644,root,root) %{_sysconfdir}/%{name}/*.lmdb %ghost %attr(0644,root,root) %{_sysconfdir}/aliases.lmdb %dir %{_sysconfdir}/sasl2 %config(noreplace) %{_sysconfdir}/sasl2/smtpd.conf -%exclude %{_sysconfdir}/%{name}/LICENSE -%exclude %{_sysconfdir}/%{name}/TLS_LICENSE %config %{_sysconfdir}/permissions.d/%{name} %config %{_sysconfdir}/permissions.d/%{name}.paranoid %{pf_meta_directory}/%{name}-files -# create our default postfix ssl DIR (/etc/postfix/ssl) -%dir %{_sysconfdir}/%{name}/ssl -%dir %{_sysconfdir}/%{name}/ssl/certs -%{_sysconfdir}/%{name}/ssl/cacerts %dir %{pf_systemd_directory} %attr(0755,root,root) %{pf_systemd_directory}/* %{_unitdir}/%{name}.service %{_unitdir}/mail-transfer-agent.target.wants +%{_bindir}/mailq +%{_bindir}/newaliases %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postdrop %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postlog %verify(not mode) %attr(2755,root,%{pf_setgid_group}) %{_sbindir}/postqueue -%{_bindir}/mailq -%{_bindir}/newaliases %attr(0755,root,root) %{_sbindir}/sendmail %attr(0755,root,root) %{_sbindir}/postalias %attr(0755,root,root) %{_sbindir}/postcat @@ -584,9 +462,7 @@ %attr(0755,root,root) %{_sbindir}/qmqp-source %attr(0755,root,root) %{_sbindir}/smtp-sink %attr(0755,root,root) %{_sbindir}/smtp-source -%attr(0755,root,root) %{_sbindir}/mk%{name}cert %attr(0755,root,root) %{_sbindir}/check_mail_queue -%attr(0755,root,root) %{_sbindir}/config.%{name} %if 0%{?suse_version} < 1599 %{_sbindir}/rc%{name} %endif @@ -609,11 +485,7 @@ %dir %{pf_meta_directory}/dynamicmaps.cf.d %dir %{pf_meta_directory}/postfix-files.d -%{conf_backup_dir} %dir %attr(0700,%{name},root) %{pf_data_directory} -%exclude %{_mandir}/man5/ldap_table.5* -%exclude %{_mandir}/man5/mysql_table.5* -%exclude %{_mandir}/man5/pgsql_table.5* %{_mandir}/man?/*%{?ext_man} %dir %attr(0755,root,root) /%{pf_queue_directory} %dir %attr(0755,root,root) /%{pf_queue_directory}/pid @@ -657,7 +529,6 @@ %if %{with ldap} %files ldap -%config(noreplace) %{_sysconfdir}/%{name}/ldap_aliases.cf %{pf_shlib_directory}/%{name}-ldap.so %{pf_meta_directory}/dynamicmaps.cf.d/%{name}-ldap.cf %{_mandir}/man5/ldap_table.5%{?ext_man} ++++++ postfix-3.10.6.tar.gz -> postfix-3.10.7.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.10.6/HISTORY new/postfix-3.10.7/HISTORY --- old/postfix-3.10.6/HISTORY 2025-11-25 20:45:54.000000000 +0100 +++ new/postfix-3.10.7/HISTORY 2025-12-05 21:02:01.000000000 +0100 @@ -29248,3 +29248,13 @@ Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault with duplicate parameter name in "postconf -X" or "postconf -#'. File: postconf/postconf_edit.c. + +20251205 + + Compatibility: recent Linux distributions have C compilers + with a built-in 'bool' type (size=1) that conflicts with + Postfix's bool (an alias for int, typically size=4). Postfix + 3.11 adopts the built-in bool type, but that change is too + large for the stable releases. Instead, the command "make + makefiles" will figure out how to make the compiler + backwards-compatible. File: makedefs. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.10.6/makedefs new/postfix-3.10.7/makedefs --- old/postfix-3.10.6/makedefs 2025-02-17 18:41:56.000000000 +0100 +++ new/postfix-3.10.7/makedefs 2025-12-05 20:42:26.000000000 +0100 @@ -1235,6 +1235,25 @@ -Wparentheses -Wstrict-prototypes -Wswitch -Wuninitialized \ -Wunused -Wno-missing-braces -fno-common'} +# C23 introduces a built-in type 'bool' (size 1) which breaks past Postfix +# practice where 'bool' is an alias for 'int' (typically, size 4). +# Fortunately, -std=gnu17 works with both gcc and clang. +cat >makedefs.test.c <<'EOF' +/* This appears in mail_params.h */ +typedef int bool; +EOF + +if eval ${CC} ${CCARGS} -c makedefs.test.c >/dev/null 2>&1 +then + : No further action needed. +elif eval ${CC} -std=gnu17 ${CCARGS} -c makedefs.test.c >/dev/null 2>&1 +then + CCARGS="-std=gnu17 $CCARGS" +else + error 'Please specify "CC=..." or "CCARGS=..." option to disable C23 bool' +fi +rm -f makedefs.test.[co] + # Extract map type names from -DHAS_XXX compiler options. We avoid # problems with tr(1) range syntax by using enumerations instead, # and we don't try to figure out which awk versions have tolower(). diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.10.6/src/global/mail_version.h new/postfix-3.10.7/src/global/mail_version.h --- old/postfix-3.10.6/src/global/mail_version.h 2025-11-25 18:18:20.000000000 +0100 +++ new/postfix-3.10.7/src/global/mail_version.h 2025-12-05 21:02:59.000000000 +0100 @@ -20,8 +20,8 @@ * Patches change both the patchlevel and the release date. Snapshots have no * patchlevel; they change the release date only. */ -#define MAIL_RELEASE_DATE "20251125" -#define MAIL_VERSION_NUMBER "3.10.6" +#define MAIL_RELEASE_DATE "20251205" +#define MAIL_VERSION_NUMBER "3.10.7" #ifdef SNAPSHOT #define MAIL_VERSION_DATE "-" MAIL_RELEASE_DATE ++++++ postfix-SUSE.tar.gz ++++++ ++++ 2994 lines of diff (skipped) ++++++ postfix-rpmlintrc ++++++ --- /var/tmp/diff_new_pack.MM5OLt/_old 2026-01-14 16:19:46.108678685 +0100 +++ /var/tmp/diff_new_pack.MM5OLt/_new 2026-01-14 16:19:46.152680516 +0100 @@ -1,12 +1,8 @@ -sddFilter("executable-sourced-script .*/sbin/conf.d/SuSEconfig.postfix") -addFilter("sourced-script-with-shebang .*/sbin/conf.d/SuSEconfig.postfix") -addFilter("devel-file-in-non-devel-package .*/usr/lib/libpostfix*.so") -addFilter("devel-file-in-non-devel-package .*/usr/lib64/libpostfix*.so") -addFilter(".*standard-dir-owned-by-package.*/var/spool/mail.*") -addFilter(".*[WE]:.*filelist-forbidden-fhs23.*/var/mail.*") addFilter("dir-or-file-outside-snapshot /var/adm/backup/postfix") addFilter("dir-or-file-outside-snapshot /var/lib/postfix") addFilter("dir-or-file-outside-snapshot /var/mail") addFilter("dir-or-file-outside-snapshot /var/spool/mail") addFilter("dir-or-file-outside-snapshot /var/spool/postfix") +addFilter("non-standard-dir-in-var*") +addFilter(".*[WE]:.*filelist-forbidden-fhs23.*/var/mail.*")
