From 7a8c0510084bfff9bb115da13353b403044d2ecb Mon Sep 17 00:00:00 2001
From: Mauro Torrez <mauro@qom>
Date: Mon, 9 Sep 2019 01:04:53 -0300
Subject: [PATCH] disable chroot

---
 tasks/main.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/tasks/main.yml b/tasks/main.yml
index dc27a28..8cee1df 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -180,6 +180,34 @@
         "{{ 'yes' if postfix_biff else 'no' }}"
   notify: reload postfix
 
+- name: Disable chroot for services
+  postconf:
+    service: "{{ item.1 }}"
+    type: "{{ item.2 }}"
+    chroot: "n"
+  notify: reload postfix
+  loop:
+    - [smtp, inet]
+    - [pickup, unix]
+    - [cleanup, unix]
+    - [qmgr, unix]
+    - [tlsmgr, unix]
+    - [rewrite, unix]
+    - [bounce, unix]
+    - [defer, unix]
+    - [trace, unix]
+    - [verify, unix]
+    - [flush, unix]
+    - [smtp, unix]
+    - [relay, unix]
+    - [showq, unix]
+    - [error, unix]
+    - [retry, unix]
+    - [discard, unix]
+    - [lmtp, unix]
+    - [anvil, unix]
+    - [scache, unix]
+
 - name: Enable submission service
   postconf:
     service: submission