chroot postfix howto?

hank43 · 12-27-2006, 04:17 AM

i've been hunting on the web looking for a detailed postfix chroot howto without any luck. where is a good one? Most all say it is easy and don't show any details. for examnple, what daemons should run chrooted?

This is a huge contrast to chrooting apache. for apache, they walk you step by step.

From what I've found, pipe, local, and virtual cannot be chrooted and proxymap should not be chrooted.

farslayer · 12-27-2006, 07:47 AM

Well it's in "The book of Postfix" (chapter 20) by Ralph Hildebrandt.. so maybe it's on his website as well..
Either way it's a great resource.. http://www.stahl.bau.tu-bs.de/~hildeb/postfix/

http://www.postfix.org/BASIC_CONFIGU...l#chroot_setup

http://www.postfix-book.com/debugging.html#d0e519

and don't forget the included documentation and examples..

Quote:

from /etc/postfix/master.cf:

# Chroot: whether or not the service runs chrooted to the mail queue
# directory (pathname is controlled by the queue_directory configuration
# variable in the main.cf file). Presently, all Postfix daemons can run
# chrooted, except for the pipe, virtual and local delivery daemons.
# The files in the examples/chroot-setup subdirectory describe how
# to set up a Postfix chroot environment for your type of machine.