[blackmilk]

[code:1:b00c473c1d]
| - /
| - /mnt/chroots
| |---------- /local
| |---------- /remote
| |---------- /public
| |------- /httpd(chroot)
| |------- /postfix(chroot)
| | |-------------- /httpd(chroot)
| |------- /postfix(chroot)
[/code:1:b00c473c1d]

I'm trying to chroot httpd so that it still serves its own purpose (sorted)
Trying to chroot postfix, along with its own httpd sothat webaccess to the mail server is available
Trying to chroot postfix to act as an email firewall

It's all backed up by redirections and such, running on seperate ports and all that.

What I'm having trouble with is chrooting postfix and all the features i want with it. I've edited the Makefile and Makefile.inc, but I can't see where to set the root directory. I'm assuming I have to edit a macro or something.

anyone shed any light on this please. Thank you

[soup4you2]

Have you considered a jail for this purpose.. might be a wee bit easier.. unless your trying to make it as lightweight as possible..

[blackmilk]

Lightweight is good, but not a goal. I ddin't think jails were available for OpenBSD.

[soup4you2]

oh this is open.. sorry nope jails are not available..

ldd truss and strings are your friends..

[blackmilk]

I can see the use of ldd, but then ldd will only be needed once i chroot postfix. But I can't se any option to do this

[blackmilk]

Nevermind :) I found out. Thanks

[blackmilk]

I've been doing a little more reading, and thinking. I can't find any examples of people chrooting postfix with OpenBSD, I can't find many examples on the whole. I'm just wondering if I've gone the difficult route again, I know I can chroot all but three processes.

Interesting to know if SE chroots postfix :/

[soup4you2]

sounds like a interesting paper to write up.... some day.. :/