Package: postfix
Version: 3.9.0-3
Severity: normal

In Debian, several postfix services run in chroot. This may have been
good in the past, but this is now strongly discouraged by upstream and
yields various issues: see the postfix bug reports mentioning chroot.

Please disable chroot for all services (upstream's default).

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), 
(500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.7.12-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages postfix depends on:
ii  adduser                3.137
ii  cpio                   2.15+dfsg-2
ii  debconf [debconf-2.0]  1.5.87
ii  dpkg                   1.22.11
ii  e2fsprogs              1.47.1-1
ii  init-system-helpers    1.67
ii  libc6                  2.40-3
ii  libdb5.3t64            5.3.28+dfsg2-7
ii  libicu72               72.1-5
ii  libnsl2                1.3.0-3+b2
ii  libsasl2-2             2.1.28+dfsg1-8
ii  libssl3t64             3.3.2-1
ii  netbase                6.4
ii  ssl-cert               1.1.3

Versions of packages postfix recommends:
ii  ca-certificates  20240203
ii  python3          3.12.6-1

Versions of packages postfix suggests:
ii  emacs-gtk [mail-reader]   1:29.4+1-3
ii  libsasl2-modules          2.1.28+dfsg1-8
ii  mailutils [mail-reader]   1:3.17-2+b1
ii  mutt [mail-reader]        2.2.13-1
pn  postfix-cdb               <none>
ii  postfix-doc               3.9.0-3
pn  postfix-ldap              <none>
pn  postfix-lmdb              <none>
pn  postfix-mongodb           <none>
pn  postfix-mta-sts-resolver  <none>
pn  postfix-mysql             <none>
ii  postfix-pcre              3.9.0-3
pn  postfix-pgsql             <none>
pn  postfix-sqlite            <none>
ii  procmail                  3.24+really3.22-4
pn  resolvconf                <none>
pn  ufw                       <none>

-- debconf information excluded

-- 
Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Reply via email to