[debian] postfix chroot setup from /etc/init.d/postfix isn't working.

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

hi,

debian's postfix init.d script does a whole stackload of
things like copy over /etc/localtime, /etc/services.

it's rather scary.

... and it doesn't work.

by disabling the chroot (setting SYNC_CHROOT="") i managed
to get postfix to start (and it works)

i don't know if i was supposed to have these enabled, but
i have added them to the end of the postfix.te file (which
came up during an "enforcing=no" boot)

	allow postfix_cleanup_t postfix_cleanup_t:capability { sys_chroot };
	allow postfix_local_t mail_spool_t:dir { remove_name };
	allow postfix_local_t mail_spool_t:file { create unlink };
	allow postfix_master_t postfix_master_t:capability { sys_chroot };
	allow postfix_pickup_t postfix_pickup_t:capability { sys_chroot };
	allow postfix_qmgr_t postfix_qmgr_t:capability { sys_chroot };


p.s. yes i tried an exim4 setup with those execve child renaming
tricks and it's all got horribly pear-shaped...

-- 
-- 
expecting email to be received and understood is a bit like
picking up the telephone and immediately dialing without
checking for a dial-tone; speaking immediately without listening
for either an answer or ring-tone; hanging up immediately and
believing that you have actually started a conversation.
--
<a href="http://lkcl.net">      lkcl.net      </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.