Package: opendkim
Version: 2.11.0~alpha-10+deb9u1

Hi,

After upgrading opendkim from 2.11.0~alpha-10 to 2.11.0~alpha-10+deb9u1
I'm no longer able to run opendkim in a chroot environment. I've moved the
configuration in /etc/default/opendkim, containing the RUNDIR environment
variable, to /etc/opendkim.conf. Otherwise this works, but specifying
ChangeRootDirectory to /var/run/opendkim.conf makes opendkim failing to
start. The only error message I'm getting is rather uninformative:

Oct  8 14:43:28 hillosipuli opendkim[367]: opendkim: smfi_opensocket() failed

I'm using INET socket inet6:12301@ip6-localhost so that shouldn't be the
problem either. If I remove ChangeRootDirectory setting, opendkim works
just fine, but is not chrooted as expected. The UserID is specified in
opendkim.conf:

---------------------------------
Syslog                  yes
LogWhy                  yes
UMask                   002
Socket                  inet6:12301@ip6-localhost

Canonicalization        relaxed/simple
Mode                    sv
SignatureAlgorithm      rsa-sha256

ExternalIgnoreList      refile:/etc/opendkim/TrustedHosts
InternalHosts           refile:/etc/opendkim/TrustedHosts
KeyTable                refile:/etc/opendkim/KeyTable
SigningTable            refile:/etc/opendkim/SigningTable

OversignHeaders         From

PidFile                 /var/run/opendkim/opendkim.pid
UserID                  opendkim:opendkim
ChangeRootDirectory     /var/run/opendkim
---------------------------------

Btw. /usr/share/doc/opendkim/README.Debian.gz still contains:

---------------------------------
Users may also need to move the socket into a directory accessible by the
Postfix chroot; this can be accomplished by setting the SOCKET variable
in /etc/default/opendkim.
---------------------------------

I'd be good to update this as well.

-- 
Kind regards,

Sakari Ailus
sakari.ai...@iki.fi

Reply via email to