From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Tue Dec 02 2003 - 06:59:22 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Wietse Venema <wietseporcupine.org>:
> Ralf Hildebrandt:
> > * Cami <camismweb.co.za>:
> >
> > > Don't let files outside your chroot have any type of
> > > interaction with files inside your chroot.. Keep them
> > > seperate.
> >
> > What about sockets? Lke syslogd listening in and outside the jail?
>
> You can give Postfix its own chrooted syslog socket.

I know, I was just talking about the security implications.

> Depending on your syslogd implementation:
>
> syslogd -l /var/spool/postfix/var/run/log
> syslogd -a /var/spool/postfix/var/run/log
>
> And so on.

Of course I forgot to setup this here...

--
Ralf Hildebrandt Ralf.Hildebrandtcharite.de
my current spamtrap spamtrapcharite.de
http://www.arschkrebs.de/postfix/ Tel. +49 (0)30-450 570-155
From empirical experience, your Exchange admin needs to put down the
crack pipe and open a window to disperse the fumes.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]