From 32afea41ba8b7328e252ae97ca32c56f98d42a90 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 6 May 2024 03:46:31 +0200 Subject: Adding debian version 3.4.23-0+deb10u1. Signed-off-by: Daniel Baumann --- debian/patches/70_postfix-check.diff | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 debian/patches/70_postfix-check.diff (limited to 'debian/patches/70_postfix-check.diff') diff --git a/debian/patches/70_postfix-check.diff b/debian/patches/70_postfix-check.diff new file mode 100644 index 0000000..6d1951c --- /dev/null +++ b/debian/patches/70_postfix-check.diff @@ -0,0 +1,23 @@ +Index: postfix/conf/postfix-script +=================================================================== +--- postfix.orig/conf/postfix-script ++++ postfix/conf/postfix-script +@@ -341,9 +341,17 @@ check-warn) + find $todo ! -user root \ + -exec $WARN not owned by root: {} \; + +- find $todo \( -perm -020 -o -perm -002 \) \ ++ # Handle symlinks separately ++ find -L $todo \( -perm -020 -o -perm -002 \) \ + -exec $WARN group or other writable: {} \; + ++ find $todo -type l | while read f; do \ ++ # makedefs out known to be a symlink and OK ++ if [ "$f" != "/etc/postfix/./makedefs.out" ]; then \ ++ readlink "$f" | grep -q / && $WARN symlink leaves directory: "$f"; \ ++ fi \ ++ done; \ ++ + # Check Postfix mail_owner-owned directory tree owner/permissions. + + find $data_directory/. ! -user $mail_owner \ -- cgit v1.2.3