[courier-users] setuid/setgid problem, mail from website not sent

2017-07-11 Thread Bernd Plagge
On Sun, 09 Jul 2017 12:14:59 +
courier-users-requ...@lists.sourceforge.net wrote:

> From: Markus Wanner <mar...@bluegap.ch>
> To: courier-users@lists.sourceforge.net
> Subject: Re: [courier-users] setuid/setgid problem,  mail from website not 
> sent
> Date: Sat, 8 Jul 2017 21:11:11 +0200
> 
> On 07/06/2017 12:13 PM, Matus UHLAR - fantomas wrote:
> > On 06.07.17 12:43, Bernd Plagge wrote:  
> >> thank you VERY much!
> >> This was the answer.
> >>
> >> Just for the record:
> >> I had to downgrade my Debian system due to issues with the new Debian
> >> packages.
> >> Seems that the permissions on the sendmail wrapper were not set
> >> correctly by the installation program.  
> > 
> > I believe debian developer either knows what permissions to set up, or
> > should be informed if that causes troubles...  
> 
> I'd rather guess the OP had to downgrade due to the maildrop issue in
> stretch, which I'm still trying to solve.
> 
> Kind Regards
> 
> Markus Wanner

Hi Markus,

well yes, the new Courier Debian version hit my users badly ... and in the end 
I decided to downgrade.
Don't get me wrong! 
I really very much appreciate somebody taking on the challenge of maintaining a 
pretty big and important package!

I've been using Debian for almost 20 years and appreciate the more conservative 
upgrading pace (i.e. in comparison to Ubuntu).
However, the Stretch upgrade was pretty bumpy due to major changes in several 
important packages. 
(PHP 7, PHP7.0-fpm, slapd, tinydns, Samba and a perl syntax check)

Please, if there are still issues with Maildrop (or something else) we need to 
fully understand the issue and have at least a manual workaround. If I restart 
a server after the upgrade and then discover issue this means most time a very 
long night - without any guarantee to solve the problem.

Aber trotz allem, vielen Dank fuer Muehe und Einsatz!

Bernd



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] setuid/setgid problem, mail from website not sent

2017-07-08 Thread Markus Wanner
On 07/06/2017 12:13 PM, Matus UHLAR - fantomas wrote:
> On 06.07.17 12:43, Bernd Plagge wrote:
>> thank you VERY much!
>> This was the answer.
>>
>> Just for the record:
>> I had to downgrade my Debian system due to issues with the new Debian
>> packages.
>> Seems that the permissions on the sendmail wrapper were not set
>> correctly by the installation program.
> 
> I believe debian developer either knows what permissions to set up, or
> should be informed if that causes troubles...

I'd rather guess the OP had to downgrade due to the maildrop issue in
stretch, which I'm still trying to solve.

Kind Regards

Markus Wanner



signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] setuid/setgid problem, mail from website not sent

2017-07-06 Thread Stefan Hornburg (Racke)
On 07/06/2017 12:13 PM, Matus UHLAR - fantomas wrote:
> On 06.07.17 12:43, Bernd Plagge wrote:
>> thank you VERY much!
>> This was the answer.
>>
>> Just for the record:
>> I had to downgrade my Debian system due to issues with the new Debian 
>> packages.
>> Seems that the permissions on the sendmail wrapper were not set correctly by 
>> the installation program.
> 
> I believe debian developer either knows what permissions to set up, or
> should be informed if that causes troubles...

Yes, please file a bug and I'll take a look at it.

Thanks
Racke

> 
>> On Thu, 06 Jul 2017 03:03:37 +
>> courier-users-requ...@lists.sourceforge.net wrote:
>>
>>> From: Sam Varshavchik <mr...@courier-mta.com>
>>> To: courier-users@lists.sourceforge.net
>>> Subject: Re: [courier-users] setuid/setgid problem,  mail from website not  
>>>sent
>>> Date: Wed, 05 Jul 2017 17:55:26 -0400
>>>
>>> Bernd Plagge writes:
>>>
>>> > Hi
>>> >
>>> > I'm trying to send mail from website mail, or webmail.
>>> > However, sending doesn't work,
>>> >
>>> > Log entries:
>>> >
>>> > Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not 
>>> > permitted
>>> > Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail
>>> > pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108.
>>> >
>>> > The courier sendmail program:
>>> > s -l /usr/sbin/sendmail
>>> > -rwxr-sr-x 1 root courier 59120 Jan 26  2015 /usr/sbin/sendmail
>>> >
>>> >
>>> > What can I do to solve this problem?
>>>
>>> Permissions on the sendmail wrapper should be setuid root, not setgid.
> 


-- 
Ecommerce and Linux consulting + Perl and web application programming.
Debian and Sympa administration.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] setuid/setgid problem, mail from website not sent

2017-07-06 Thread Matus UHLAR - fantomas

On 06.07.17 12:43, Bernd Plagge wrote:

thank you VERY much!
This was the answer.

Just for the record:
I had to downgrade my Debian system due to issues with the new Debian packages.
Seems that the permissions on the sendmail wrapper were not set correctly by 
the installation program.


I believe debian developer either knows what permissions to set up, or
should be informed if that causes troubles...


On Thu, 06 Jul 2017 03:03:37 +
courier-users-requ...@lists.sourceforge.net wrote:


From: Sam Varshavchik <mr...@courier-mta.com>
To: courier-users@lists.sourceforge.net
Subject: Re: [courier-users] setuid/setgid problem,  mail from website not  
   sent
Date: Wed, 05 Jul 2017 17:55:26 -0400

Bernd Plagge writes:

> Hi
>
> I'm trying to send mail from website mail, or webmail.
> However, sending doesn't work,
>
> Log entries:
>
> Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted
> Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail
> pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108.
>
> The courier sendmail program:
> s -l /usr/sbin/sendmail
> -rwxr-sr-x 1 root courier 59120 Jan 26  2015 /usr/sbin/sendmail
>
>
> What can I do to solve this problem?

Permissions on the sendmail wrapper should be setuid root, not setgid.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] setuid/setgid problem, mail from website not sent

2017-07-05 Thread Bernd Plagge
Hi Sam,

thank you VERY much!
This was the answer.

Just for the record: 
I had to downgrade my Debian system due to issues with the new Debian packages.
Seems that the permissions on the sendmail wrapper were not set correctly by 
the installation program.

Again, thank you very much!



On Thu, 06 Jul 2017 03:03:37 +
courier-users-requ...@lists.sourceforge.net wrote:

> From: Sam Varshavchik <mr...@courier-mta.com>
> To: courier-users@lists.sourceforge.net
> Subject: Re: [courier-users] setuid/setgid problem,  mail from website not    
>  sent
> Date: Wed, 05 Jul 2017 17:55:26 -0400
> 
> Bernd Plagge writes:
> 
> > Hi
> >
> > I'm trying to send mail from website mail, or webmail.
> > However, sending doesn't work,
> >
> > Log entries:
> >
> > Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted
> > Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail  
> > pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108.
> >
> > The courier sendmail program:
> > s -l /usr/sbin/sendmail
> > -rwxr-sr-x 1 root courier 59120 Jan 26  2015 /usr/sbin/sendmail
> >
> >
> > What can I do to solve this problem?  
> 
> Permissions on the sendmail wrapper should be setuid root, not setgid.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] setuid/setgid problem, mail from website not sent

2017-07-05 Thread Sam Varshavchik

Bernd Plagge writes:


Hi

I'm trying to send mail from website mail, or webmail.
However, sending doesn't work,

Log entries:

Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted
Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail  
pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108.


The courier sendmail program:
s -l /usr/sbin/sendmail
-rwxr-sr-x 1 root courier 59120 Jan 26  2015 /usr/sbin/sendmail


What can I do to solve this problem?


Permissions on the sendmail wrapper should be setuid root, not setgid.




pgprgnATZ9HsP.pgp
Description: PGP signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] setuid/setgid problem, mail from website not sent

2017-07-05 Thread Gordon Messmer

On 07/05/2017 11:33 AM, Bernd Plagge wrote:

What can I do to solve this problem?



First, "setenforce permissive" and send a message, or examine 
/var/log/audit/audit.log to see if this is an SELinux denial.


Next, in permissive mode, use "tail -f /var/log/audit/audit.log | grep 
AVC" to watch the log while you send another message.  Take all of the 
output and pass it as input to "audit2allow -M lighttpd_sendmail".  That 
will create a new SELinux policy module that you can load to allow 
lighttpd to send email.



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] setuid/setgid problem, mail from website not sent

2017-07-05 Thread Bernd Plagge
Hi 

I'm trying to send mail from website mail, or webmail.
However, sending doesn't work, 

Log entries:

Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted
Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail pipe 
failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108.

The courier sendmail program:
s -l /usr/sbin/sendmail
-rwxr-sr-x 1 root courier 59120 Jan 26  2015 /usr/sbin/sendmail


What can I do to solve this problem?

Best regards,
Bernd


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users