-
David Runge authoredSwitch to correct license (EPL). Add a patch to set defaults in main.cf in prepare(). Split AUXLIBS into the various specific subcomponents. Provide SHLIB_RPATH to achieve full RELRO. Add dynamicmaps=yes so that dynamic libraries are split. Add CPPFLAGS to OPT, so that fortify is applied. Replace call to custom post-install script with tmpfiles.d. Remove unneeded patch and customizations. Apply mild hardening to the systemd service. Add tmpfiles.d integration for sgid binaries and custom chmod directories in /var/spool. Update maintainer info.
David Runge authoredSwitch to correct license (EPL). Add a patch to set defaults in main.cf in prepare(). Split AUXLIBS into the various specific subcomponents. Provide SHLIB_RPATH to achieve full RELRO. Add dynamicmaps=yes so that dynamic libraries are split. Add CPPFLAGS to OPT, so that fortify is applied. Replace call to custom post-install script with tmpfiles.d. Remove unneeded patch and customizations. Apply mild hardening to the systemd service. Add tmpfiles.d integration for sgid binaries and custom chmod directories in /var/spool. Update maintainer info.
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
postfix.service 422 B
[Unit]
Description=Postfix Mail Transport Agent
After=network.target
[Service]
CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE
ExecReload=/usr/bin/postfix reload
ExecStart=/usr/bin/postfix start
ExecStop=/usr/bin/postfix stop
PIDFile=/var/spool/postfix/pid/master.pid
PrivateDevices=true
PrivateTmp=true
ProtectSystem=true
Restart=always
Type=forking
[Install]
WantedBy=multi-user.target