OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Chroot'ing Postfix?

From: Andre Tomt (andretomt.net)
Date: Tue Dec 28 2004 - 12:56:19 CST


EchtLiebenswertaol.com wrote:
> Its a Debian Linux...
>
> I know how to chroot Postfix via master.cf or chroot-command. But which
> services are mentioned to chroot? Or just ignore the master.cf and use chroot?
> Maybe any links, tutorials or experience? :)

I tend to prefer the chroot'ing the software you're using provides (ie
master.cf level with postfix). It gives you pretty much the same level
of protection with much less maintaince hassle.

I havn't checked with Debian 3.0 (Woody), but the to-be-released 3.1
(Sarge) ships postfix with most postfix daemons chrooted by default.