mail-filter/opendkim: add an elog about sharing a local socket.

Sharing a local OpenDKIM socket with an MTA is far too tricky. This
commit adds an elog with some vague hints, but we really need a decent
wiki page with some step-by-step instructions. This is progress
towards bug 575666, but I won't consider that resolved until we have
a wiki page.

Bug: https://bugs.gentoo.org/575666
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
Package-Manager: Portage-2.3.62, Repoman-2.3.11

diff --git a/mail-filter/opendkim/opendkim-2.10.3-r7.ebuild b/mail-filter/opendkim/opendkim-2.10.3-r7.ebuild
index 0b9543949307563a3b32b5a694ac9900d6e2eb0a..28700f349638cfd85b3880b9598c8b4e7c0335b4 100644 (file)
--- a/mail-filter/opendkim/opendkim-2.10.3-r7.ebuild
+++ b/mail-filter/opendkim/opendkim-2.10.3-r7.ebuild
@@ -153,6 +153,18 @@ pkg_postinst() {
                elog "  emerge --config ${CATEGORY}/${PN}"
                elog "It will help you create your key and give you hints on how"
                elog "to configure your DNS and MTA."
+
+               # TODO: This is tricky, we really need a good wiki page showing
+               # how to share a local socket with an MTA!
+               elog "If you are using a local (UNIX) socket, then you will"
+               elog "need to make sure that your MTA has read/write access"
+               elog "to the socket file. This is best accomplished by creating"
+               elog "a completely-new group with only your MTA user and the "
+               elog "\"opendkim\" user in it. You would then set \"UMask 0112\""
+               elog "in your opendkim.conf, and switch the primary group of your"
+               elog "\"opendkim\" user to the group that you just created. The"
+               elog "last step is necessary for the socket to be created as the"
+               elog "new group (and not as group \"opendkim\")".
        else
                ewarn "The user account for the OpenDKIM daemon has changed"
                ewarn "from \"milter\" to \"opendkim\" to prevent unrelated services"