# plugins have unresolvable symbols in compile time

%undefine _strict_symbol_defs_build

%bcond_without mysql

%bcond_without pgsql

%bcond_without sqlite

%bcond_without cdb

%bcond_without ldap

%bcond_without lmdb

%bcond_without pcre

%bcond_without sasl

%bcond_without tls

%bcond_without ipv6

%bcond_without pflogsumm

%global sysv2systemdnvr 2.8.12-2

# hardened build if not overrided

%{!?_hardened_build:%global _hardened_build 1}

# Postfix requires one exlusive uid/gid and a 2nd exclusive gid for its own

# use.  Let me know if the second gid collides with another package.

# Be careful: Redhat's 'mail' user & group isn't unique!

%define postfix_uid	89

%define postfix_user	postfix

%define postfix_gid	89

%define postfix_group	postfix

%define maildrop_group	postdrop

%define maildrop_gid	90

%define postfix_config_dir	%{_sysconfdir}/postfix

%define postfix_daemon_dir	%{_libexecdir}/postfix

%define postfix_shlib_dir	%{_libdir}/postfix

%define postfix_command_dir	%{_sbindir}

%define postfix_queue_dir	%{_var}/spool/postfix

%define postfix_data_dir	%{_var}/lib/postfix

%define postfix_doc_dir		%{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}}

%define postfix_sample_dir	%{postfix_doc_dir}/samples

%define postfix_readme_dir	%{postfix_doc_dir}/README_FILES

%global sslcert %{_sysconfdir}/pki/tls/certs/postfix.pem

%global sslkey  %{_sysconfdir}/pki/tls/private/postfix.key

# Filter private libraries

%global _privatelibs libpostfix-.+\.so.*

%global __provides_exclude ^(%{_privatelibs})$

%global __requires_exclude ^(%{_privatelibs})$

Name: postfix

Summary: Postfix Mail Transport Agent

Version: 3.5.9

Release: 19%{?dist}

Epoch: 2

URL: http://www.postfix.org

License: (IBM and GPLv2+) or (EPL-2.0 and GPLv2+)

Requires(post): systemd systemd-sysv hostname

Requires(post): %{_sbindir}/alternatives

Requires(post): %{_bindir}/openssl

Requires(pre): %{_sbindir}/groupadd

Requires(pre): %{_sbindir}/useradd

Requires(preun): %{_sbindir}/alternatives

Requires(preun): systemd

Requires(postun): systemd

# Required by /usr/libexec/postfix/postfix-script

Requires: diffutils

Requires: findutils

# for restorecon

Requires: policycoreutils

Provides: MTA smtpd smtpdaemon server(smtp)

Source0: ftp://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz

Source1: postfix-etc-init.d-postfix

Source2: postfix.service

Source3: README-Postfix-SASL-RedHat.txt

Source4: postfix.aliasesdb

Source5: postfix-chroot-update

# Sources 50-99 are upstream [patch] contributions

%define pflogsumm_ver 1.1.5

# Postfix Log Entry Summarizer: http://jimsun.linxnet.com/postfix_contrib.html

Source53: http://jimsun.linxnet.com/downloads/pflogsumm-%{pflogsumm_ver}.tar.gz

# Sources >= 100 are config files

Source100: postfix-sasl.conf

Source101: postfix-pam.conf

# Patches

Patch1: postfix-3.5.0-config.patch

Patch2: postfix-3.4.0-files.patch

Patch3: postfix-3.3.3-alternatives.patch

Patch4: postfix-3.4.0-large-fs.patch

Patch9: pflogsumm-1.1.5-datecalc.patch

# rhbz#1384871, sent upstream

Patch10: pflogsumm-1.1.5-ipv6-warnings-fix.patch

Patch11: postfix-3.4.4-chroot-example-fix.patch

# unconditional glibc-2.34 API assumption, because it seems

# in RHEL-9 this feature was also backported to 2.33,

# upstream uses conditional check for 2.34 API

Patch12: postfix-3.5.9-glibc-234-build-fix.patch

# rhbz#1978901, sent upstream

Patch13: postfix-3.5.9-whitespace-name-fix.patch

Patch14: pflogsumm-1.1.5-syslog-name-underscore-fix.patch

# rhbz#1938847, backported from upstream

Patch15: postfix-3.5.9-coverity-fix.patch

# Optional patches - set the appropriate environment variables to include

#                    them when building the package/spec file

# Determine the different packages required for building postfix

BuildRequires: make

BuildRequires: libdb-devel, perl-generators, pkgconfig, zlib-devel

BuildRequires: systemd-units, libicu-devel

BuildRequires: gcc, m4, findutils

%if 0%{?rhel} < 9

BuildRequires: libnsl2-devel

%endif

%{?with_ldap:BuildRequires: openldap-devel}

%{?with_lmdb:BuildRequires: lmdb-devel}

%{?with_sasl:BuildRequires: cyrus-sasl-devel}

%{?with_pcre:BuildRequires: pcre-devel}

%{?with_mysql:BuildRequires: mariadb-connector-c-devel}

%{?with_pgsql:BuildRequires: libpq-devel}

%{?with_sqlite:BuildRequires: sqlite-devel}

%{?with_cdb:BuildRequires: tinycdb-devel}

%{?with_tls:BuildRequires: openssl-devel}

%description

Postfix is a Mail Transport Agent (MTA).

%if 0%{?fedora} < 23 && 0%{?rhel} < 9

%package sysvinit

Summary: SysV initscript for postfix

BuildArch: noarch

Requires: %{name} = %{epoch}:%{version}-%{release}

Requires(preun): chkconfig

Requires(post): chkconfig

%description sysvinit

This package contains the SysV initscript.

%endif

%package perl-scripts

Summary: Postfix utilities written in perl

Requires: %{name} = %{epoch}:%{version}-%{release}

# perl-scripts introduced in 2:2.5.5-2

Obsoletes: postfix < 2:2.5.5-2

%if %{with pflogsumm}

Provides: postfix-pflogsumm = %{epoch}:%{version}-%{release}

Obsoletes: postfix-pflogsumm < 2:2.5.5-2

%endif

%description perl-scripts

This package contains perl scripts pflogsumm and qshape.

Pflogsumm is a log analyzer/summarizer for the Postfix MTA. It is

designed to provide an over-view of Postfix activity. Pflogsumm

generates summaries and, in some cases, detailed reports of mail

server traffic volumes, rejected and bounced email, and server

warnings, errors and panics.

qshape prints Postfix queue domain and age distribution.

%if %{with mysql}

%package mysql

Summary: Postfix MySQL map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description mysql

This provides support for MySQL maps in Postfix. If you plan to use MySQL

maps with Postfix, you need this.

%endif

%if %{with pgsql}

%package pgsql

Summary: Postfix PostgreSQL map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description pgsql

This provides support for PostgreSQL  maps in Postfix. If you plan to use

PostgreSQL maps with Postfix, you need this.

%endif

%if %{with sqlite}

%package sqlite

Summary: Postfix SQLite map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description sqlite

This provides support for SQLite maps in Postfix. If you plan to use SQLite

maps with Postfix, you need this.

%endif

%if %{with cdb}

%package cdb

Summary: Postfix CDB map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description cdb

This provides support for CDB maps in Postfix. If you plan to use CDB

maps with Postfix, you need this.

%endif

%if %{with ldap}

%package ldap

Summary: Postfix LDAP map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description ldap

This provides support for LDAP maps in Postfix. If you plan to use LDAP

maps with Postfix, you need this.

%endif

%if %{with lmdb}

%package lmdb

Summary: Postfix LDMB map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description lmdb

This provides support for LMDB maps in Postfix. If you plan to use LMDB

maps with Postfix, you need this.

%endif

%if %{with pcre}

%package pcre

Summary: Postfix PCRE map support

Requires: %{name} = %{epoch}:%{version}-%{release}

%description pcre

This provides support for PCRE maps in Postfix. If you plan to use PCRE

maps with Postfix, you need this.

%endif

%prep

%setup -q

# Apply obligatory patches

%patch1 -p1 -b .config

%patch2 -p1 -b .files

%patch3 -p1 -b .alternatives

%patch4 -p1 -b .large-fs

# Change DEF_SHLIB_DIR according to build host

sed -i \

's|^\(\s*#define\s\+DEF_SHLIB_DIR\s\+\)"/usr/lib/postfix"|\1"%{_libdir}/postfix"|' \

src/global/mail_params.h

%if %{with pflogsumm}

gzip -dc %{SOURCE53} | tar xf -

pushd pflogsumm-%{pflogsumm_ver}

%patch9 -p1 -b .datecalc

%patch10 -p1 -b .ipv6-warnings-fix

popd

%endif

%patch11 -p1 -b .chroot-example-fix

%patch12 -p1 -b .glibc-234-build-fix

%patch13 -p1 -b .whitespace-name-fix

%patch14 -p1 -b .pflogsumm-1.1.5-syslog-name-underscore-fix

%patch15 -p1 -b .coverity-fix

for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do

	iconv -f iso8859-1 -t utf8 -o ${f}{_,} &&

		touch -r ${f}{,_} && mv -f ${f}{_,}

done

%build

unset AUXLIBS AUXLIBS_LDAP AUXLIBS_LMDB AUXLIBS_PCRE AUXLIBS_MYSQL AUXLIBS_PGSQL AUXLIBS_SQLITE AUXLIBS_CDB

CCARGS="-fPIC -fcommon"

%if 0%{?rhel} >= 9

AUXLIBS=""

%else

AUXLIBS="-lnsl"

%endif

%ifarch s390 s390x ppc

CCARGS="${CCARGS} -fsigned-char"

%endif

%if %{with ldap}

  CCARGS="${CCARGS} -DHAS_LDAP -DLDAP_DEPRECATED=1 %{?with_sasl:-DUSE_LDAP_SASL}"

  AUXLIBS_LDAP="-lldap -llber"

%endif

%if %{with lmdb}

  CCARGS="${CCARGS} -DHAS_LMDB"

  AUXLIBS_LMDB="-llmdb"

%endif

%if %{with pcre}

  # -I option required for pcre 3.4 (and later?)

  CCARGS="${CCARGS} -DHAS_PCRE -I%{_includedir}/pcre"

  AUXLIBS_PCRE="-lpcre"

%endif

%if %{with mysql}

  CCARGS="${CCARGS} -DHAS_MYSQL -I%{_includedir}/mysql"

  AUXLIBS_MYSQL="-L%{_libdir}/mariadb -lmysqlclient -lm"

%endif

%if %{with pgsql}

  CCARGS="${CCARGS} -DHAS_PGSQL -I%{_includedir}/pgsql"

  AUXLIBS_PGSQL="-lpq"

%endif

%if %{with sqlite}

  CCARGS="${CCARGS} -DHAS_SQLITE `pkg-config --cflags sqlite3`"

  AUXLIBS_SQLITE="`pkg-config --libs sqlite3`"

%endif

%if %{with cdb}

  CCARGS="${CCARGS} -DHAS_CDB `pkg-config --cflags libcdb`"

  AUXLIBS_CDB="`pkg-config --libs libcdb`"

%endif

%if %{with sasl}

  CCARGS="${CCARGS} -DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I%{_includedir}/sasl"

  AUXLIBS="${AUXLIBS} -L%{_libdir}/sasl2 -lsasl2"

  %global sasl_config_dir %{_sysconfdir}/sasl2

%endif

%if %{with tls}

  if pkg-config openssl ; then

    CCARGS="${CCARGS} -DUSE_TLS `pkg-config --cflags openssl`"

    AUXLIBS="${AUXLIBS} `pkg-config --libs openssl`"

  else

    CCARGS="${CCARGS} -DUSE_TLS -I%{_includedir}/openssl"

    AUXLIBS="${AUXLIBS} -lssl -lcrypto"

  fi

%endif

%if ! %{with ipv6}

  CCARGS="${CCARGS} -DNO_IPV6"

%endif

CCARGS="${CCARGS} -DDEF_CONFIG_DIR=\\\"%{postfix_config_dir}\\\""

CCARGS="${CCARGS} $(getconf LFS_CFLAGS)"

%if 0%{?rhel} >= 9

    CCARGS="${CCARGS} -DNO_NIS"

%endif

LDFLAGS="%{?__global_ldflags} %{?_hardened_build:-Wl,-z,relro,-z,now}"

# SHLIB_RPATH is needed to find private libraries

# LDFLAGS are added to SHLIB_RPATH because the postfix build system

# ignores them. Adding LDFLAGS to SHLIB_RPATH is currently the only

# way how to get them in

make -f Makefile.init makefiles shared=yes dynamicmaps=yes \

  %{?_hardened_build:pie=yes} CCARGS="${CCARGS}" AUXLIBS="${AUXLIBS}" \

  AUXLIBS_LDAP="${AUXLIBS_LDAP}" AUXLIBS_LMDB="${AUXLIBS_LMDB}" \

  AUXLIBS_PCRE="${AUXLIBS_PCRE}" AUXLIBS_MYSQL="${AUXLIBS_MYSQL}" \

  AUXLIBS_PGSQL="${AUXLIBS_PGSQL}" AUXLIBS_SQLITE="${AUXLIBS_SQLITE}" \

  AUXLIBS_CDB="${AUXLIBS_CDB}" \

  DEBUG="" SHLIB_RPATH="-Wl,-rpath,%{postfix_shlib_dir} $LDFLAGS" \

  OPT="$RPM_OPT_FLAGS -fno-strict-aliasing -Wno-comment" \

  POSTFIX_INSTALL_OPTS=-keep-build-mtime

%make_build

%install

# install postfix into $RPM_BUILD_ROOT

# Move stuff around so we don't conflict with sendmail

for i in man1/mailq.1 man1/newaliases.1 man1/sendmail.1 man5/aliases.5 man8/smtpd.8; do

  dest=$(echo $i | sed 's|\.[1-9]$|.postfix\0|')

  mv man/$i man/$dest

  sed -i "s|^\.so $i|\.so $dest|" man/man?/*.[1-9]

done

make non-interactive-package \

       install_root=$RPM_BUILD_ROOT \

       config_directory=%{postfix_config_dir} \

       meta_directory=%{postfix_config_dir} \

       shlib_directory=%{postfix_shlib_dir} \

       daemon_directory=%{postfix_daemon_dir} \

       command_directory=%{postfix_command_dir} \

       queue_directory=%{postfix_queue_dir} \

       data_directory=%{postfix_data_dir} \

       sendmail_path=%{postfix_command_dir}/sendmail.postfix \

       newaliases_path=%{_bindir}/newaliases.postfix \

       mailq_path=%{_bindir}/mailq.postfix \

       mail_owner=%{postfix_user} \

       setgid_group=%{maildrop_group} \

       manpage_directory=%{_mandir} \

       sample_directory=%{postfix_sample_dir} \

       readme_directory=%{postfix_readme_dir} || exit 1

# Systemd

mkdir -p %{buildroot}%{_unitdir}

install -m 644 %{SOURCE2} %{buildroot}%{_unitdir}

install -m 755 %{SOURCE4} %{buildroot}%{postfix_daemon_dir}/aliasesdb

install -m 755 %{SOURCE5} %{buildroot}%{postfix_daemon_dir}/chroot-update

install -c auxiliary/rmail/rmail $RPM_BUILD_ROOT%{_bindir}/rmail.postfix

for i in active bounce corrupt defer deferred flush incoming private saved maildrop public pid saved trace; do

    mkdir -p $RPM_BUILD_ROOT%{postfix_queue_dir}/$i

done

# install performance benchmark and test tools by hand

for i in smtp-sink smtp-source posttls-finger ; do

  install -c -m 755 bin/$i $RPM_BUILD_ROOT%{postfix_command_dir}/

  install -c -m 755 man/man1/$i.1 $RPM_BUILD_ROOT%{_mandir}/man1/

done

## RPM compresses man pages automatically.

## - Edit postfix-files to reflect this, so post-install won't get confused

##   when called during package installation.

sed -i -r "s#(/man[158]/.*.[158]):f#\1.gz:f#" $RPM_BUILD_ROOT%{postfix_config_dir}/postfix-files

cat $RPM_BUILD_ROOT%{postfix_config_dir}/postfix-files

%if %{with sasl}

# Install the smtpd.conf file for SASL support.

mkdir -p $RPM_BUILD_ROOT%{sasl_config_dir}

install -m 644 %{SOURCE100} $RPM_BUILD_ROOT%{sasl_config_dir}/smtpd.conf

%endif

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/pam.d

install -m 644 %{SOURCE101} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/smtp.postfix

# prepare documentation

mkdir -p $RPM_BUILD_ROOT%{postfix_doc_dir}

cp -p %{SOURCE3} COMPATIBILITY LICENSE TLS_ACKNOWLEDGEMENTS TLS_LICENSE $RPM_BUILD_ROOT%{postfix_doc_dir}

mkdir -p $RPM_BUILD_ROOT%{postfix_doc_dir}/examples{,/chroot-setup}

cp -pr examples/{qmail-local,smtpd-policy} $RPM_BUILD_ROOT%{postfix_doc_dir}/examples

cp -p examples/chroot-setup/LINUX2 $RPM_BUILD_ROOT%{postfix_doc_dir}/examples/chroot-setup

cp conf/{main,bounce}.cf.default $RPM_BUILD_ROOT%{postfix_doc_dir}

sed -i 's#%{postfix_config_dir}\(/bounce\.cf\.default\)#%{postfix_doc_dir}\1#' $RPM_BUILD_ROOT%{_mandir}/man5/bounce.5

rm -f $RPM_BUILD_ROOT%{postfix_config_dir}/{TLS_,}LICENSE

find $RPM_BUILD_ROOT%{postfix_doc_dir} -type f | xargs chmod 644

find $RPM_BUILD_ROOT%{postfix_doc_dir} -type d | xargs chmod 755

%if %{with pflogsumm}

install -c -m 644 pflogsumm-%{pflogsumm_ver}/pflogsumm-faq.txt $RPM_BUILD_ROOT%{postfix_doc_dir}/pflogsumm-faq.txt

install -c -m 644 pflogsumm-%{pflogsumm_ver}/pflogsumm.1 $RPM_BUILD_ROOT%{_mandir}/man1/pflogsumm.1

install -c pflogsumm-%{pflogsumm_ver}/pflogsumm.pl $RPM_BUILD_ROOT%{postfix_command_dir}/pflogsumm

%endif

# install qshape

mantools/srctoman - auxiliary/qshape/qshape.pl > qshape.1

install -c qshape.1 $RPM_BUILD_ROOT%{_mandir}/man1/qshape.1

install -c auxiliary/qshape/qshape.pl $RPM_BUILD_ROOT%{postfix_command_dir}/qshape

# remove alias file

rm -f $RPM_BUILD_ROOT%{postfix_config_dir}/aliases

# create /usr/lib/sendmail

mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib

pushd $RPM_BUILD_ROOT%{_prefix}/lib

ln -sf ../sbin/sendmail.postfix .

popd

mkdir -p $RPM_BUILD_ROOT%{_var}/lib/misc

touch $RPM_BUILD_ROOT%{_var}/lib/misc/postfix.aliasesdb-stamp

# prepare alternatives ghosts

for i in %{postfix_command_dir}/sendmail %{_bindir}/{mailq,newaliases,rmail} \

	%{_sysconfdir}/pam.d/smtp %{_prefix}/lib/sendmail \

	%{_mandir}/{man1/{mailq.1,newaliases.1},man5/aliases.5,man8/{sendmail.8,smtpd.8}}

do

	touch $RPM_BUILD_ROOT$i

done

# helper for splitting content of dynamicmaps.cf and postfix-files

function split_file

{

# "|| :" to silently skip non existent records

  grep "$1" "$3" >> "$3.d/$2" || :

  sed -i "\|$1| d" "$3" || :

}

# split global dynamic maps configuration to individual sub-packages

pushd $RPM_BUILD_ROOT%{postfix_config_dir}

for map in %{?with_mysql:mysql} %{?with_pgsql:pgsql} %{?with_sqlite:sqlite} \

%{?with_cdb:cdb} %{?with_ldap:ldap} %{?with_lmdb:lmdb} %{?with_pcre:pcre}; do

  rm -f dynamicmaps.cf.d/"$map" "postfix-files.d/$map"

  split_file "^\s*$map\b" "$map" dynamicmaps.cf

  sed -i "s|postfix-$map\\.so|%{postfix_shlib_dir}/\\0|" "dynamicmaps.cf.d/$map"

  split_file "^\$shlib_directory/postfix-$map\\.so:" "$map" postfix-files

  split_file "^\$manpage_directory/man5/${map}_table\\.5" "$map" postfix-files

  map_upper=`echo $map | tr '[:lower:]' '[:upper:]'`

  split_file "^\$readme_directory/${map_upper}_README:" "$map" postfix-files

done

popd

%post -e

%systemd_post %{name}.service

# upgrade configuration files if necessary

%{_sbindir}/postfix set-permissions upgrade-configuration \

	daemon_directory=%{postfix_daemon_dir} \

	command_directory=%{postfix_command_dir} \

	mail_owner=%{postfix_user} \

	setgid_group=%{maildrop_group} \

	manpage_directory=%{_mandir} \

	sample_directory=%{postfix_sample_dir} \

	readme_directory=%{postfix_readme_dir} &> /dev/null

ALTERNATIVES_DOCS=""

[ "%%{_excludedocs}" = 1 ] || ALTERNATIVES_DOCS='--slave %{_mandir}/man1/mailq.1.gz mta-mailqman %{_mandir}/man1/mailq.postfix.1.gz

	--slave %{_mandir}/man1/newaliases.1.gz mta-newaliasesman %{_mandir}/man1/newaliases.postfix.1.gz

	--slave %{_mandir}/man8/sendmail.8.gz mta-sendmailman %{_mandir}/man1/sendmail.postfix.1.gz

	--slave %{_mandir}/man5/aliases.5.gz mta-aliasesman %{_mandir}/man5/aliases.postfix.5.gz

	--slave %{_mandir}/man8/smtpd.8.gz mta-smtpdman %{_mandir}/man8/smtpd.postfix.8.gz'

%{_sbindir}/alternatives --install %{postfix_command_dir}/sendmail mta %{postfix_command_dir}/sendmail.postfix 60 \

	--slave %{_bindir}/mailq mta-mailq %{_bindir}/mailq.postfix \

	--slave %{_bindir}/newaliases mta-newaliases %{_bindir}/newaliases.postfix \

	--slave %{_sysconfdir}/pam.d/smtp mta-pam %{_sysconfdir}/pam.d/smtp.postfix \

	--slave %{_bindir}/rmail mta-rmail %{_bindir}/rmail.postfix \

	--slave %{_prefix}/lib/sendmail mta-sendmail %{_prefix}/lib/sendmail.postfix \

	$ALTERNATIVES_DOCS \

	--initscript postfix

%if %{with sasl}

# Move sasl config to new location

if [ -f %{_libdir}/sasl2/smtpd.conf ]; then

	mv -f %{_libdir}/sasl2/smtpd.conf %{sasl_config_dir}/smtpd.conf

	/sbin/restorecon %{sasl_config_dir}/smtpd.conf 2> /dev/null

fi

%endif

# Create self-signed SSL certificate

if [ ! -f %{sslkey} ]; then

  umask 077

  %{_bindir}/openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out %{sslkey} 2>/dev/null || echo "openssl genpkey failed"

fi

if [ ! -f %{sslcert} ]; then

  FQDN=`hostname`

  if [ "x${FQDN}" = "x" ]; then

    FQDN=localhost.localdomain

  fi

  req_cmd="%{_bindir}/openssl req -new -key %{sslkey} -x509 -sha256 -days 365 -set_serial $RANDOM -out %{sslcert} \

    -subj /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=${FQDN}/emailAddress=root@${FQDN}"

# openssl-3.0 and fallback for backward compatibility with openssl < 3.0

  $req_cmd -noenc -copy_extensions none 2>/dev/null || $req_cmd 2>/dev/null || echo "openssl req failed"

  chmod 644 %{sslcert}

fi

exit 0

%pre

# Add user and groups if necessary

%{_sbindir}/groupadd -g %{maildrop_gid} -r %{maildrop_group} 2>/dev/null

%{_sbindir}/groupadd -g %{postfix_gid} -r %{postfix_group} 2>/dev/null

%{_sbindir}/groupadd -g 12 -r mail 2>/dev/null

%{_sbindir}/useradd -d %{postfix_queue_dir} -s /sbin/nologin -g %{postfix_group} -G mail -M -r -u %{postfix_uid} %{postfix_user} 2>/dev/null

# hack, to turn man8/smtpd.8.gz into alternatives symlink (part of the rhbz#1051180 fix)

# this could be probably dropped in f23+

if [ -e %{_mandir}/man8/smtpd.8.gz ]; then

	[ -h %{_mandir}/man8/smtpd.8.gz ] || rm -f %{_mandir}/man8/smtpd.8.gz

fi

exit 0

%preun

%systemd_preun %{name}.service

if [ "$1" = 0 ]; then

    %{_sbindir}/alternatives --remove mta %{postfix_command_dir}/sendmail.postfix

fi

exit 0

%postun

%systemd_postun_with_restart %{name}.service

%if 0%{?fedora} < 23 && 0%{?rhel} < 9

%post sysvinit

/sbin/chkconfig --add postfix >/dev/null 2>&1 ||:

%preun sysvinit

if [ "$1" = 0 ]; then

    %{_initrddir}/postfix stop >/dev/null 2>&1 ||:

    /sbin/chkconfig --del postfix >/dev/null 2>&1 ||:

fi

%postun sysvinit

[ "$1" -ge 1 ] && %{_initrddir}/postfix condrestart >/dev/null 2>&1 ||:

%triggerpostun -n postfix-sysvinit -- postfix < %{sysv2systemdnvr}

/sbin/chkconfig --add postfix >/dev/null 2>&1 || :

%endif

%triggerun -- postfix < %{sysv2systemdnvr}

%{_bindir}/systemd-sysv-convert --save postfix >/dev/null 2>&1 ||:

%{_bindir}/systemd-sysv-convert --apply postfix >/dev/null 2>&1 ||:

/sbin/chkconfig --del postfix >/dev/null 2>&1 || :

/bin/systemctl try-restart postfix.service >/dev/null 2>&1 || :

%files

# For correct directory permissions check postfix-install script.

# It reads the file postfix-files which defines the ownership

# and permissions for all files postfix installs.

%defattr(-, root, root, -)

# Config files not part of upstream

%if %{with sasl}

%config(noreplace) %{sasl_config_dir}/smtpd.conf

%endif

%config(noreplace) %{_sysconfdir}/pam.d/smtp.postfix

%{_unitdir}/postfix.service

# Documentation

%{postfix_doc_dir}

%if %{with pflogsumm}

%exclude %{postfix_doc_dir}/pflogsumm-faq.txt

%endif

# Exclude due to dynamic maps subpackages

%exclude %{_mandir}/man5/mysql_table.5*

%exclude %{postfix_doc_dir}/README_FILES/MYSQL_README

%exclude %{_mandir}/man5/pgsql_table.5*

%exclude %{postfix_doc_dir}/README_FILES/PGSQL_README

%exclude %{_mandir}/man5/sqlite_table.5*

%exclude %{postfix_doc_dir}/README_FILES/SQLITE_README

%exclude %{postfix_doc_dir}/README_FILES/CDB_README

%exclude %{_mandir}/man5/ldap_table.5*

%exclude %{postfix_doc_dir}/README_FILES/LDAP_README

%exclude %{_mandir}/man5/lmdb_table.5*

%exclude %{postfix_doc_dir}/README_FILES/LMDB_README

%exclude %{_mandir}/man5/pcre_table.5*

%exclude %{postfix_doc_dir}/README_FILES/PCRE_README

# Misc files

%dir %attr(0755, root, root) %{postfix_config_dir}

%dir %attr(0755, root, root) %{postfix_daemon_dir}

%dir %attr(0755, root, root) %{postfix_queue_dir}

%dir %attr(0755, root, root) %{postfix_shlib_dir}

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace

%dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop

%dir %attr(0755, root, root) %{postfix_queue_dir}/pid

%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private

%dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public

%dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}

%dir %attr(0755, root, root) %{postfix_config_dir}/dynamicmaps.cf.d

%dir %attr(0755, root, root) %{postfix_config_dir}/postfix-files.d

%attr(0644, root, root) %{_mandir}/man1/post*.1*

%attr(0644, root, root) %{_mandir}/man1/smtp*.1*

%attr(0644, root, root) %{_mandir}/man1/*.postfix.1*

%attr(0644, root, root) %{_mandir}/man5/access.5*

%attr(0644, root, root) %{_mandir}/man5/[b-v]*.5*

%attr(0644, root, root) %{_mandir}/man5/*.postfix.5*

%attr(0644, root, root) %{_mandir}/man8/[a-qt-v]*.8*

%attr(0644, root, root) %{_mandir}/man8/s[ch-lnp]*.8*

%attr(0644, root, root) %{_mandir}/man8/smtp.8*

%attr(0644, root, root) %{_mandir}/man8/smtpd.postfix.8*

%attr(0755, root, root) %{postfix_command_dir}/smtp-sink

%attr(0755, root, root) %{postfix_command_dir}/smtp-source

%attr(0755, root, root) %{postfix_command_dir}/posttls-finger

%attr(0755, root, root) %{postfix_command_dir}/postalias

%attr(0755, root, root) %{postfix_command_dir}/postcat

%attr(0755, root, root) %{postfix_command_dir}/postconf

%attr(2755, root, %{maildrop_group}) %{postfix_command_dir}/postdrop

%attr(0755, root, root) %{postfix_command_dir}/postfix

%attr(0755, root, root) %{postfix_command_dir}/postkick

%attr(0755, root, root) %{postfix_command_dir}/postlock

%attr(0755, root, root) %{postfix_command_dir}/postlog

%attr(0755, root, root) %{postfix_command_dir}/postmap

%attr(0755, root, root) %{postfix_command_dir}/postmulti

%attr(2755, root, %{maildrop_group}) %{postfix_command_dir}/postqueue

%attr(0755, root, root) %{postfix_command_dir}/postsuper

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/access

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/canonical

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/generic

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/header_checks

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/main.cf

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/main.cf.proto

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/master.cf

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/master.cf.proto

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/relocated

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/transport

%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/virtual

%attr(0644, root, root) %{postfix_config_dir}/dynamicmaps.cf

%attr(0755, root, root) %{postfix_daemon_dir}/[^mp]*

%attr(0755, root, root) %{postfix_daemon_dir}/master

%attr(0755, root, root) %{postfix_daemon_dir}/pickup

%attr(0755, root, root) %{postfix_daemon_dir}/pipe

%attr(0755, root, root) %{postfix_daemon_dir}/post-install

%attr(0644, root, root) %{postfix_config_dir}/postfix-files

%attr(0755, root, root) %{postfix_daemon_dir}/postfix-script

%attr(0755, root, root) %{postfix_daemon_dir}/postfix-tls-script

%attr(0755, root, root) %{postfix_daemon_dir}/postfix-wrapper

%attr(0755, root, root) %{postfix_daemon_dir}/postmulti-script

%attr(0755, root, root) %{postfix_daemon_dir}/postscreen

%attr(0755, root, root) %{postfix_daemon_dir}/postlogd

%attr(0755, root, root) %{postfix_daemon_dir}/proxymap

%attr(0755, root, root) %{postfix_shlib_dir}/libpostfix-*.so

%{_bindir}/mailq.postfix

%{_bindir}/newaliases.postfix

%attr(0755, root, root) %{_bindir}/rmail.postfix

%attr(0755, root, root) %{_sbindir}/sendmail.postfix

%{_prefix}/lib/sendmail.postfix

%ghost %{_sysconfdir}/pam.d/smtp

%ghost %{_mandir}/man1/mailq.1.gz

%ghost %{_mandir}/man1/newaliases.1.gz

%ghost %{_mandir}/man5/aliases.5.gz

%ghost %{_mandir}/man8/sendmail.8.gz

%ghost %{_mandir}/man8/smtpd.8.gz