Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chroot in master.cf should not depend on default values #333

Open
jahlives opened this issue Jul 31, 2020 · 2 comments
Open

chroot in master.cf should not depend on default values #333

jahlives opened this issue Jul 31, 2020 · 2 comments

Comments

@jahlives
Copy link

  • Modoboa: 1.15.0
  • installer used: Yes

looks to me that there is a potential issue with postfix depending on OS used and Postfix version. Postfix 2.10 has a default value for chroot YES whereas postfix from 3 onwards uses default NO (see postfix manpage).
The master.cf does not specify a value for chroot so default is used. The problem arises if the OS does not properly setup the chroot environment. We were affected on Centos7.
Our name resolution did not work at all. After setting chroot to NO (n) in master.cf the resolution worked.
Found that the chroot-update script from centos has issues described here and therefore does not copy all necessary files (mostly libfiles) into the chroot dir.

imho the master.cf configuration should always specify a value for chroot of a service and not depend on default values which may change at any update

@tonioo tonioo transferred this issue from modoboa/modoboa Aug 10, 2020
@tonioo
Copy link
Member

tonioo commented Aug 10, 2020

@jahlives Maybe adding an option to the installer could be a good solution? (either to chroot or not)

@jahlives
Copy link
Author

@tonioo think an installer option should do it (make it default to no). Maybe as a plus: verify that chroot environment is okay, although could be hard to determine that from outside of postfix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants