OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ralf Hildebrandt (news-list.postfix.usersinnominate.de)
Date: Sat Apr 14 2001 - 06:09:06 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 14 Apr 2001 01:58:10 +0200, Michael Hall <adminmulga.com.au> wrote:

    > 1. I have postfix running as a sendmail replacement on RH 6.1. It dropped
    > in effortlessly and runs without a hitch. It is not, however, chrooted as
    > I could not find enough detail about how to actually do this. How
    > vulnerable is postfix without chrooting? The man page for chroot had
    > little info I could use, same with the postfix docs. They seem to assume
    > that one is already familiar with the process.

    You need to setup the chroot jail using examples/chroot-setup/<Your OS> from
    the source distribution.
    Then you edit /etc/postfix/master.cf; there's a column "chroot" for every
    daemon. All daemons except "local" can run chrooted. So put a "y" into that
    column.

    -- 
    ralf.hildebrandtinnominate.com                            innominate AG
    System Engineer                        Don't be afraid of what you see -
    Diplom-Informatiker                     be afraid of what you don't see!
    tel: +49.(0)7000.POSTFIX  fax: +49.(0)30.308806-698         
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users