Hi Ralf,
I've checked the "postfix" package again and it _IS_ correct. I've a different guess as this is only one way your could end up with "default_privs = root" in main.cf: Either you manually configured it or you bootstrapped incorrectly. Please do the following and compare it with my values:| $ openpkg rpm --eval '%{l_susr},%{l_musr},%{l_rusr},%{l_nusr}' | root,openpkg-dev,openpkg-dev-r,openpkg-dev-n You see, l_nusr is by default "<user>-n" from the --user=<user> parameter you specified when bootstrapping your instance. My suspicion is that you seem to have specified the parameters during bootstrapping in a strange way? Hope you are not using --nusr=root or --nuid=0? This would be already a major security problem, btw.
Ok my mistake once again .. Postfix package is indeed ok. Openpkg is great, use it, men and women :-) In fact, I did not specify a particular user at bootstrapping, hence the l_musr and l_mgrp of my openpkg instance was root... Did not realise the implications of this for security. So I'll re-bootstrap my whole openpkg instance with --user=openpkg and --group=openpkg, re-read the documentation from the start, and learn good practises for building and installing openpkg packages. Afterall, no binaries seems to need the root right, I had the habit of installing rpm as root, so I kept, wrongly, this habit with openpkg.. Hope the lazy admins can sometime go to paradise in spite of their lazyness :-) Best Regards, Olivier Kaloudoff ______________________________________________________________________ OpenPKG http://openpkg.org User Communication List openpkg-users@openpkg.org
