On Tue, Oct 30, 2012 at 04:55:28PM +0000, Colin Guthrie wrote: > So, what should we do? Should we switch to bind mounts? Should we make > saslauthd/postfix use abstract sockets instead to get around the chroot?
bind mount for just saslauth seems cleanest to me. Don't bind mount entire /run or /var/run, could impact security of the chroot somehow. -- Regards, Olav
