When mysql backend is used, postfix logs mysql options like password to log if build without m4 in build environment. Note, this is a security issue because sql passwords are printed to log! This log is from postfix mailinglist and was reported by a fedora user. Aug 12 22:39:28 crash postfix[21125]: /usr/sbin/postconf: warning: mysql:/etc/postfix/users.cf: unused parameter: password=xxxxxxx Aug 12 22:39:28 crash postfix[21125]: /usr/sbin/postconf: warning: mysql:/etc/postfix/users.cf: unused parameter: dbname=mailbox Aug 12 22:39:28 crash postfix[21125]: /usr/sbin/postconf: warning: mysql:/etc/postfix/users.cf: unused parameter: query=SELECT mail FROM users WHERE mail='%> Aug 12 22:39:28 crash postfix[21125]: /usr/sbin/postconf: warning: mysql:/etc/postfix/users.cf: unused parameter: user=administrator Aug 12 22:39:28 crash postfix[21125]: /usr/sbin/postconf: warning: mysql:/etc/postfix/users.cf: unused parameter: hosts=127.0.0.1 Evidence from build log https://kojipkgs.fedoraproject.org//packages/postfix/3.3.1/1.fc28/data/logs/x86_64/build.log sh extract_cfg.sh -d ../global/dict_ldap.c > pcf_ldap_suffixes.h extract_cfg.sh: line 74: m4: command not found sh extract_cfg.sh -d ../global/dict_memcache.c > pcf_memcache_suffixes.h sh extract_cfg.sh -d -s ../global/dict_mysql.c > pcf_mysql_suffixes.h extract_cfg.sh: line 74: m4: command not found extract_cfg.sh: line 74: m4: command not found sh extract_cfg.sh -d -s ../global/dict_pgsql.c > pcf_pgsql_suffixes.h postconf_master.c: In function 'pcf_show_master_entries': sh extract_cfg.sh -d -s ../global/dict_sqlite.c > pcf_sqlite_suffixes.h postconf_master.c:603:25: warning: 'field_reqs' may be used uninitialized in this function [-Wmaybe-uninitialized] PCF_MASTER_FLD_REQ *field_reqs; ^~~~~~~~~~ extract_cfg.sh: line 74: m4: command not found extract_cfg.sh: line 74: m4: command not found
Added m4 to BuildRequires in postfix-3.3.1-2.fc28 and up.
postfix-3.3.1-2.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-c60acb4e7c
postfix-3.3.1-2.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-c60acb4e7c
postfix-3.3.1-2.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.