From 17d3ba5e9c2b0d3b2acbf74db127d64b579edd93 Mon Sep 17 00:00:00 2001 From: Eray Aslan Date: Mon, 14 Aug 2023 15:25:08 +0200 Subject: [PATCH] mail-mta/postfix: permit cdb and lmdb alias files so that postfix can run newaliases when cdb or lmdb is the default db AND postfix is started via systemd Signed-off-by: Eray Aslan --- mail-mta/postfix/files/postfix.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mail-mta/postfix/files/postfix.service b/mail-mta/postfix/files/postfix.service index db585b3e29dbe..7a72aaa8e50b9 100644 --- a/mail-mta/postfix/files/postfix.service +++ b/mail-mta/postfix/files/postfix.service @@ -12,7 +12,7 @@ ExecReload=/usr/sbin/postfix reload PrivateTmp=yes PrivateDevices=yes ProtectSystem=full -ReadWritePaths=-/etc/mail/aliases.db +ReadWritePaths=-/etc/mail/aliases.db -/etc/mail/aliases.cdb -/etc/mail/aliases.lmdb CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE MemoryDenyWriteExecute=true ProtectKernelModules=true