chroot jail.

[Julian Field]

At 13:15 21/08/2003, you wrote:
>Hi.
>
>On my SuSE 8.2 system I'm trying to set up MailScanner. I have a file
>called LINUX2 in the postfix examples directory it looks like this:
>
>Is this the chroot jail file ?. Shall it be renamed ?:

It's the script that generates the chroot jail. Just run it and you'll get
a chroot jail in /var/spool/postfix which is just where you need it.



>#! /bin/sh
>
># LINUX2 - shell script to set up a Postfix chroot jail for Linux
># Tested on SuSE Linux 5.3 (libc5) and 7.0 (glibc2.1)
>
># Other testers reported as working:
>#
># 2001-01-15 Debian sid (unstable)
>#            Christian Kurz <shorty at getuid.de>
>
># Copyright (c) 2000 - 2001 by Matthias Andree
># Redistributable unter the MIT-style license that follows:
># Abstract: "do whatever you want except hold somebody liable or change
># the copyright information".
>
># Permission is hereby granted, free of charge, to any person obtaining
>a copy
># of this software and associated documentation files (the "Software"), to
># deal in the Software without restriction, including without limitation the
># rights to use, copy, modify, merge, publish, distribute, sublicense,
>and/or
># sell copies of the Software, and to permit persons to whom the Software is
># furnished to do so, subject to the following conditions:
>#
># The above copyright notice and this permission notice shall be included in
># all copies or substantial portions of the Software.
>#
># THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
># IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
># FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT
>SHALL THE
># AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
># LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
># FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
>DEALINGS
># IN THE SOFTWARE.
>
># 2000-09-29
># v0.1: initial release
>
># 2000-12-05
># v0.2: copy libdb.* for libnss_db.so
>#       remove /etc/localtime in case it's a broken symlink
>#       restrict find to maxdepth 1 (faster)
>
># Revision 1.4  2001/01/15 09:36:35  emma
># add note it was successfully tested on Debian sid
>#
>
>CP="cp -p"
>
>cond_copy() {
>   # find files as per pattern in $1
>   # if any, copy to directory $2
>   dir=`dirname "$1"`
>     pat=`basename "$1"`
>   lr=`find "$dir" -maxdepth 1 -name "$pat"`
>   if test ! -d "$2" ; then exit 1 ; fi
>   if test "x$lr" != "x" ; then $CP $1 "$2" ; fi
>}
>
>set -e
>umask 022
>
>POSTFIX_DIR=${POSTFIX_DIR-/var/spool/postfix}
>cd ${POSTFIX_DIR}
>MAIL_CREATE_CONFIG=yes
>POSTFIX_UPDATE_CHROOT_JAIL=yes
>mkdir -p etc lib usr/lib/zoneinfo
>
># find localtime (SuSE 5.3 does not have /etc/localtime)
>lt=/etc/localtime
>if test ! -f $lt ; then lt=/usr/lib/zoneinfo/localtime ; fi
>if test ! -f $lt ; then lt=/usr/share/zoneinfo/localtime ; fi
>if test ! -f $lt ; then echo "cannot find localtime" ; exit 1 ; fi
>rm -f etc/localtime
>
># copy localtime and some other system files into the chroot's etc
>$CP -f $lt /etc/services /etc/resolv.conf /etc/nsswitch.conf etc
>$CP -f /etc/host.conf /etc/hosts /etc/passwd etc
>ln -s -f /etc/localtime usr/lib/zoneinfo
>
># copy required libraries into the chroot
>cond_copy '/lib/libnss_*.so*' lib
>cond_copy '/lib/libresolv.so*' lib
>cond_copy '/lib/libdb.so*' lib
>
>postfix reload
>
>TIA.
>
>--
>Med venlig hilsen - Best regards.
>Erik Jakobsen - eja at urbakken.dk.
>Licensed radioamateur with the callsign OZ4KK.
>SuSE Linux 8.2 Proff.
>Registered as user #319488 with the Linux Counter, http://counter.li.org.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support