From: Liviu Daia (no email)
Date: Mon Apr 01 2002 - 16:07:49 EST
On 1 April 2002, <> wrote:
>
> Wietse Venema <>:
> >
> > How would `postfix check' know what files another process opens?
>
> While one cannot get this 100% right (custom extensions, "-o" options
> in master.cf, ...), an approximation can go a long way towards more
> direct user feedback in most configurations that a new user is likely
> to encounter.
>
> 1. Check for map references in smtpd_*_restrictions.
> 2. Check for map references in custom restriction classes.
> 3. Check for map references in canonical_maps, sender_canonical_maps,
> recipient_canonical_maps, virtual_maps, virtual_mailbox_maps, alias_maps,
> mailbox_command_maps, ...
>
> Checking the validity of the map is best accomplished (I think) by
> adding a new option to "postmap".
>
> postmap -e mtype:mspec
>
> This could open the map and return success, otherwise return an
> error. No query will be performed. By default only maps with a stat_fd
> should be checked. Another option (-E?) might enable checking of IPC
> based maps (ldap, tcp, ...).
[...]
That won't work as long as some files / sockets / whatever
associated to maps are opened before going into the chroot jail while
others are opened (not necessarily by Postfix --- think MySQL) after
that operation.
Regards,
Liviu Daia
-- Dr. Liviu Daia e-mail: Institute of Mathematics web page: http://www.imar.ro/~daia of the Romanian Academy PGP key: http://www.imar.ro/~daia/daia.asc - To unsubscribe, send mail to with content (not subject): unsubscribe postfix-users
|
|
|