> > The default master.cf as distributed by postfix has all services as
> > chroot "n", and that is the recommended setting.
> > -- Noel Jones
> Thanks Noel.
> Interesting. From
> http://www.postfix.org/BASIC_CONFIGURATION_README.html#chroot_setup, the
> recommendation seems to be to use chroot wherever possible. In
> fact, it says: "The author's own porcupine.org mail server runs
> all daemons chrooted that can be chrooted." (Maybe this is left
> over from when the default for chroot was "y"?)
With Postfix 3, chroot is no longer the default. It remains an
available option for people who want to go through the effort.