Re: [courier-users] setuid/setgid problem, mail from website not sent
On 07/06/2017 12:13 PM, Matus UHLAR - fantomas wrote: > On 06.07.17 12:43, Bernd Plagge wrote: >> thank you VERY much! >> This was the answer. >> >> Just for the record: >> I had to downgrade my Debian system due to issues with the new Debian >> packages. >> Seems that the permissions on the sendmail wrapper were not set >> correctly by the installation program. > > I believe debian developer either knows what permissions to set up, or > should be informed if that causes troubles... I'd rather guess the OP had to downgrade due to the maildrop issue in stretch, which I'm still trying to solve. Kind Regards Markus Wanner signature.asc Description: OpenPGP digital signature -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] setuid/setgid problem, mail from website not sent
On 07/06/2017 12:13 PM, Matus UHLAR - fantomas wrote: > On 06.07.17 12:43, Bernd Plagge wrote: >> thank you VERY much! >> This was the answer. >> >> Just for the record: >> I had to downgrade my Debian system due to issues with the new Debian >> packages. >> Seems that the permissions on the sendmail wrapper were not set correctly by >> the installation program. > > I believe debian developer either knows what permissions to set up, or > should be informed if that causes troubles... Yes, please file a bug and I'll take a look at it. Thanks Racke > >> On Thu, 06 Jul 2017 03:03:37 + >> courier-users-requ...@lists.sourceforge.net wrote: >> >>> From: Sam Varshavchik >>> To: courier-users@lists.sourceforge.net >>> Subject: Re: [courier-users] setuid/setgid problem, mail from website not >>>sent >>> Date: Wed, 05 Jul 2017 17:55:26 -0400 >>> >>> Bernd Plagge writes: >>> >>> > Hi >>> > >>> > I'm trying to send mail from website mail, or webmail. >>> > However, sending doesn't work, >>> > >>> > Log entries: >>> > >>> > Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not >>> > permitted >>> > Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail >>> > pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108. >>> > >>> > The courier sendmail program: >>> > s -l /usr/sbin/sendmail >>> > -rwxr-sr-x 1 root courier 59120 Jan 26 2015 /usr/sbin/sendmail >>> > >>> > >>> > What can I do to solve this problem? >>> >>> Permissions on the sendmail wrapper should be setuid root, not setgid. > -- Ecommerce and Linux consulting + Perl and web application programming. Debian and Sympa administration. -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] setuid/setgid problem, mail from website not sent
On 06.07.17 12:43, Bernd Plagge wrote: thank you VERY much! This was the answer. Just for the record: I had to downgrade my Debian system due to issues with the new Debian packages. Seems that the permissions on the sendmail wrapper were not set correctly by the installation program. I believe debian developer either knows what permissions to set up, or should be informed if that causes troubles... On Thu, 06 Jul 2017 03:03:37 + courier-users-requ...@lists.sourceforge.net wrote: From: Sam Varshavchik To: courier-users@lists.sourceforge.net Subject: Re: [courier-users] setuid/setgid problem, mail from website not sent Date: Wed, 05 Jul 2017 17:55:26 -0400 Bernd Plagge writes: > Hi > > I'm trying to send mail from website mail, or webmail. > However, sending doesn't work, > > Log entries: > > Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted > Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail > pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108. > > The courier sendmail program: > s -l /usr/sbin/sendmail > -rwxr-sr-x 1 root courier 59120 Jan 26 2015 /usr/sbin/sendmail > > > What can I do to solve this problem? Permissions on the sendmail wrapper should be setuid root, not setgid. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000: 640 MB ought to be enough for anybody -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] setuid/setgid problem, mail from website not sent
Bernd Plagge writes: Hi I'm trying to send mail from website mail, or webmail. However, sending doesn't work, Log entries: Jul 06 00:25:45 linde lighttpd[1182]: setuid/setgid: Operation not permitted Jul 06 00:25:45 linde lighttpd[1182]: /cgi-bin/FormMail.pl: close sendmail pipe failed, mailprog=[/usr/lib/sendmail -oi -t] at (eval 9) line 108. The courier sendmail program: s -l /usr/sbin/sendmail -rwxr-sr-x 1 root courier 59120 Jan 26 2015 /usr/sbin/sendmail What can I do to solve this problem? Permissions on the sendmail wrapper should be setuid root, not setgid. pgprgnATZ9HsP.pgp Description: PGP signature -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] setuid/setgid problem, mail from website not sent
On 07/05/2017 11:33 AM, Bernd Plagge wrote: What can I do to solve this problem? First, "setenforce permissive" and send a message, or examine /var/log/audit/audit.log to see if this is an SELinux denial. Next, in permissive mode, use "tail -f /var/log/audit/audit.log | grep AVC" to watch the log while you send another message. Take all of the output and pass it as input to "audit2allow -M lighttpd_sendmail". That will create a new SELinux policy module that you can load to allow lighttpd to send email. -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
