On 1/6/26 14:26, ckubu wrote: ...
This indicates that MemoryDenyWriteExecute=yes prevents Ruby FFI from functioning correctly, likely by blocking runtime memory permission changes required by native extensions.
This feels to me like at this time, any software which has WX memory regions is inherently broken and should be fixed, including ruby or other parts of the system.
Workaround: Create a systemd drop-in override for postfix.service: /etc/systemd/system/postfix.service.d/override.conf [Service] MemoryDenyWriteExecute=no
This looks to be the correct solution for this issue, until ruby is fixed. It should not, in my opinion, be enabled for a regular install of postfix which does not include broken components. Thanks, /mjt
