diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2018-12-06 21:06:38 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2018-12-09 20:25:39 +0100 |
| commit | 09cd9f998780fb7179b7fc23c593c305a12b050a (patch) | |
| tree | 33dad72c3a5256347a0e9700b975612c8c477918 /roles/MX/files/etc/postfix/virtual/domains.cf | |
| parent | 37d64e4a05b32599405ed824316e73aa8d0880b2 (diff) | |
MX: chroot postscreen(8), smtpd(8) and cleanup(8) daemons.
Unlike what we wrote in 2014 (cf. 4fb4be4d279dd94cab33fc778cfa318b93d6926f)
the postscreen(8) server can run chrooted, meaning we can also chroot
the smtpd(8), tlsproxy(8), dnsblog(8) and cleanup(8) daemons.
Diffstat (limited to 'roles/MX/files/etc/postfix/virtual/domains.cf')
| -rw-r--r-- | roles/MX/files/etc/postfix/virtual/domains.cf | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/roles/MX/files/etc/postfix/virtual/domains.cf b/roles/MX/files/etc/postfix/virtual/domains.cf index f5a7f25..88e17e2 100644 --- a/roles/MX/files/etc/postfix/virtual/domains.cf +++ b/roles/MX/files/etc/postfix/virtual/domains.cf @@ -1,11 +1,9 @@ -# XXX: How come we use a socked relative to the chroot here? smtpd(8) is -# not (can't be) chrooted... server_host = ldapi://%2Fprivate%2Fldapi/ version = 3 search_base = ou=virtual,dc=fripost,dc=org scope = one bind = sasl sasl_mechs = EXTERNAL query_filter = (&(objectClass=FripostVirtualDomain)(!(objectClass=FripostPendingEntry))(fvd=%s)(fripostIsStatusActive=TRUE)) result_attribute = fvd result_format = OK |