diff --git a/postfix.changes b/postfix.changes index afa96e9..748cc57 100644 --- a/postfix.changes +++ b/postfix.changes @@ -2,6 +2,7 @@ Wed May 9 10:07:10 UTC 2012 - varkoly@suse.com - bnc#753910 - {name} instead of %{name} in postfix .spec +- bnc#756452 - VUL-1: postfix: VRFY allows enumerating users ------------------------------------------------------------------- Thu May 3 16:47:11 UTC 2012 - chris@computersalat.de diff --git a/postfix.spec b/postfix.spec index 0582478..8630278 100644 --- a/postfix.spec +++ b/postfix.spec @@ -276,6 +276,9 @@ $RPM_BUILD_ROOT/usr/sbin/postconf -c $RPM_BUILD_ROOT/etc/%{name} \ "html_directory = %{pf_html_directory}" \ "sample_directory = %{pf_sample_directory}" \ "daemon_directory = %{pf_daemon_directory}" \ + "smtpd_helo_required = yes" \ + "smtpd_delay_reject = yes" \ + "disable_vrfy_command = yes" \ 'smtpd_banner = $myhostname ESMTP' #Set Permissions install -m 644 %{name}-SuSE/%{name}-files $RPM_BUILD_ROOT/usr/lib/postfix/postfix-files