Bug#820090: chroot default value in master.cf changed from yes to no in Postfix 3.0 - init script needs to reflect this

[Scott Kitterman]

On April 5, 2016 7:53:09 AM EDT, Marcel Meckel  wrote:
>Package: postfix
>Version: 3.0.4-5
>Severity: important
>
>when upgrading postfix from jessie to (yet unreleased stretch) postfix
>warns that master.cf my contain default value '-' for the chroot
>column but the default of that chroot value depends on postfix setting
>'compatibility_level'.
>
>Please see
>
>   http://www.postfix.org/COMPATIBILITY_README.html#chroot
>
>for more details.
>
>postfix init.d script contains this:
>
>---snip---
> config_dir=$($POSTCONF -h config_directory)
> # see if anything is running chrooted.
>  NEED_CHROOT=$(awk '/^[0-9a-z]/ && ($5 ~ "[-yY]") { print "y"; exit}' 
>${config_dir}/master.cf)
>---snip---
>
>This needs to be modified to take the output of
>`postconf compatibility_level' into account.
>
>If compatibility_level  < 2, default value '-' equals to: do chroot.
>If compatibility_level >= 2, default value '-' equals to: don't chroot.

Please check 3.1.0-1 in unstable. I believe this is already fixed.

Scott K

Bug#820090: chroot default value in master.cf changed from yes to no in Postfix 3.0 - init script needs to reflect this

[Marcel Meckel]

Package: postfix
Version: 3.0.4-5
Severity: important

when upgrading postfix from jessie to (yet unreleased stretch) postfix
warns that master.cf my contain default value '-' for the chroot
column but the default of that chroot value depends on postfix setting
'compatibility_level'.

Please see

  http://www.postfix.org/COMPATIBILITY_README.html#chroot

for more details.

postfix init.d script contains this:

---snip---
config_dir=$($POSTCONF -h config_directory)
# see if anything is running chrooted.
NEED_CHROOT=$(awk '/^[0-9a-z]/ && ($5 ~ "[-yY]") { print "y"; exit}' 
${config_dir}/master.cf)

---snip---

This needs to be modified to take the output of
`postconf compatibility_level' into account.

If compatibility_level  < 2, default value '-' equals to: do chroot.
If compatibility_level >= 2, default value '-' equals to: don't chroot.

Marcel