Am Montag, 13. Januar 2003 12:28 schrieb Buchan Milne:
> Martin Fahrendorf wrote:
> > Am Samstag, 11. Januar 2003 18:12 schrieb Michael Scherer:
> >
> > simply disable the chroot jail. If you ar not permanently connected to
> > the internet and your postfix does not listen to public reachable
> > ports it does not relaly mater. And postfix is known to be realy
> > stable and secure.
>
> But the script should still be fixed to update files in the jail from
> outside the jail.
>
> Plus, one wonders why the default is to chroot, since probably most
> postfix installations on Mandrake are not production servers, and at
> present chrooting is more trouble than it is worth for typical use.
>

An a additional problem: there are some programs (dhcpcd pppd) that can 
change /etc/resolv.conf during runtime, so the change of the startup is 
not valid anymore. And, more problematic, postfix does not know of this 
changes. And btw: Wietse Venema highly recomends the use of chroot only to 
experienced users.

> Buchan

Martin
-- 
------------------------------------------------------------
H E L I X Gesellschaft f�r Software & Engineering mbH
------------------------------------------------------------
Hanauer Landstrasse 52              Telefon (069) 4789 35-30
60314 Frankfurt am Main             Telefax (069) 4789 35-44
------------------------------------------------------------
http://www.helix-gmbh.net                [EMAIL PROTECTED]
------------------------------------------------------------

Attachment: msg85781/pgp00000.pgp
Description: signature

Reply via email to