mirror of
https://github.com/docker-mailserver/docker-mailserver.git
synced 2024-01-19 02:48:50 +00:00
config: remove chroot
for Dovecot & PostSRSd (#3208)
* remove PostSRSd chroot * remove chroot for Dovecot A dedicated file for Dovecot's chroot environments is easier to handle and adjust later.
This commit is contained in:
parent
1c231053d0
commit
585a2d64d2
|
@ -114,3 +114,5 @@ service dict {
|
||||||
#group =
|
#group =
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
!include chroot.inc
|
||||||
|
|
47
target/dovecot/chroot.inc
Normal file
47
target/dovecot/chroot.inc
Normal file
|
@ -0,0 +1,47 @@
|
||||||
|
# This file removes `chroot` environments that
|
||||||
|
#
|
||||||
|
# 1. are not strictly needed
|
||||||
|
# 2. can cause problems
|
||||||
|
#
|
||||||
|
# See https://github.com/docker-mailserver/docker-mailserver/pull/3208#pullrequestreview-1366106516
|
||||||
|
# and it's related PRs.
|
||||||
|
|
||||||
|
service aggregator {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service anvil {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service director {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service ipc {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service old-stats {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service imap-login {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service managesieve-login {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service pop3-login {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service submission-login {
|
||||||
|
chroot =
|
||||||
|
}
|
||||||
|
|
||||||
|
service imap-urlauth-login {
|
||||||
|
chroot =
|
||||||
|
}
|
|
@ -36,6 +36,3 @@ SRS_REVERSE_PORT=10002
|
||||||
# This is highly recommended as postsrsd handles untrusted input.
|
# This is highly recommended as postsrsd handles untrusted input.
|
||||||
#
|
#
|
||||||
RUN_AS=postsrsd
|
RUN_AS=postsrsd
|
||||||
|
|
||||||
# Jail daemon in chroot environment
|
|
||||||
CHROOT=/var/lib/postsrsd
|
|
||||||
|
|
Loading…
Reference in a new issue