config: remove chroot for Dovecot & PostSRSd (#3208)

* remove PostSRSd chroot
* remove chroot for Dovecot

A dedicated file for Dovecot's chroot environments is easier to handle
and adjust later.
This commit is contained in:
Georg Lauterbach 2023-03-31 12:17:44 +02:00 committed by GitHub
parent 1c231053d0
commit 585a2d64d2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 49 additions and 3 deletions

View file

@ -114,3 +114,5 @@ service dict {
#group = #group =
} }
} }
!include chroot.inc

47
target/dovecot/chroot.inc Normal file
View file

@ -0,0 +1,47 @@
# This file removes `chroot` environments that
#
# 1. are not strictly needed
# 2. can cause problems
#
# See https://github.com/docker-mailserver/docker-mailserver/pull/3208#pullrequestreview-1366106516
# and it's related PRs.
service aggregator {
chroot =
}
service anvil {
chroot =
}
service director {
chroot =
}
service ipc {
chroot =
}
service old-stats {
chroot =
}
service imap-login {
chroot =
}
service managesieve-login {
chroot =
}
service pop3-login {
chroot =
}
service submission-login {
chroot =
}
service imap-urlauth-login {
chroot =
}

View file

@ -36,6 +36,3 @@ SRS_REVERSE_PORT=10002
# This is highly recommended as postsrsd handles untrusted input. # This is highly recommended as postsrsd handles untrusted input.
# #
RUN_AS=postsrsd RUN_AS=postsrsd
# Jail daemon in chroot environment
CHROOT=/var/lib/postsrsd