Package: anope
Version: 2.0.9-1
Severity: important
X-Debbugs-Cc: whi...@whissi.de
When you try to send a mail via anope, i.e. expecting verification mail
after
/msg nickserv register
command, you will notice that anope will fail to send that mail.
Anope will log:
Error delivering mail for Tester (tes...@exmple.org)
When you attach strace to anope, you will spot
> 1241673 execve("/bin/sh", ["sh", "-c", "/usr/sbin/sendmail"], 0x5593d1a32e40
> /* 23 vars */) = -1 EACCES (Permission denied)
In dmesg you will see
> [Sun May 28 00:35:51 2023] audit: type=1400 audit(1685226997.426:16):
> apparmor="DENIED" operation="exec" profile="/usr/sbin/anope" name="/bin/dash"
> pid=1241413 comm="anope" requested_mask="x" denied_mask="x" fsuid=39 ouid=0
-- System Information:
Debian Release: 11.7
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-23-amd64 (SMP w/6 CPU threads)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages anope depends on:
ii init-system-helpers 1.60
ii libc6 2.31-13+deb11u6
ii libgcc-s1 10.2.1-6
ii libgnutls30 3.7.1-5+deb11u3
ii libldap-2.4-2 2.4.57+dfsg-3+deb11u1
ii libmariadb3 1:10.5.19-0+deb11u2
ii libpcre3 2:8.39-13
ii libsqlite3-0 3.34.1-3
ii libstdc++6 10.2.1-6
ii lsb-base 11.1.0
Versions of packages anope recommends:
ii exim4-daemon-light [mail-transport-agent] 4.94.2-7
anope suggests no packages.
-- no debconf information
