The updated Apparmor profile and debian/NEWS were proposed for
integration: https://salsa.debian.org/kolter/msmtp/merge_requests/1
Regards,
Simon
Package: msmtp
Version: 1.8.1-2
Followup-For: Bug #918820
Hi,
I just wanted to +1 the updated AppArmor profile attached to the bug
report. I suspect there will be a number of users who have their msmtp
configured with passwordeval as per the ArchLinux wiki [1], so
supporting this configuration
On 2019-01-10 9:54 a.m., Kai Weber wrote:
> * Simon Deziel :
>
>> Actually, please use this new attached profile which is identical in
>> purpose but uses better names.
>
> The profile works with the secret-tool solution.
Great, thanks for testing, I really appreciate it.
> If the maintainers
* Simon Deziel :
> Actually, please use this new attached profile which is identical in
> purpose but uses better names.
The profile works with the secret-tool solution.
If the maintainers choose to restrict the use of "secret helpers" to
only gpg* and secret-tool than this should be mentioned
On 2019-01-09 8:57 p.m., Simon Deziel wrote:
> Could you give a try to the attached profile and report back?
Actually, please use this new attached profile which is identical in
purpose but uses better names.
Thanks,
Simon
# Author: Simon Deziel
#include
/usr/bin/msmtp
On 2019-01-09 11:52 a.m., Kai Weber wrote:
> passwordeval python -c "import keyring; print keyring.get_password('smtp',
> 'kai.we...@glorybox.de')"
> passwordeval secret-tool lookup service smtp username kai.we...@glorybox.de
The python version would be hard to secure and is probably not widely
* Simon Deziel :
I did two tests. One with passwordeval using python, one with
passwordeval using secret-tool.
passwordeval python -c "import keyring; print keyring.get_password('smtp',
'kai.we...@glorybox.de')"
passwordeval secret-tool lookup service smtp username kai.we...@glorybox.de
Find
Hi Kai,
On 2019-01-09 10:03 a.m., kai.we...@glorybox.de wrote:
> With the AppArmor profile shipped the 'passwordeval' options does not
> work anymore. I tried using the permitted "gpg" or "secret-tool" but
> this did not work.
>
> msmtp uses popen(3) which in turn seems to exec /bin/dash which
Package: msmtp
Version: 1.8.1-2
Severity: important
Dear Maintainer,
With the AppArmor profile shipped the 'passwordeval' options does not
work anymore. I tried using the permitted "gpg" or "secret-tool" but
this did not work.
msmtp uses popen(3) which in turn seems to exec /bin/dash which is
9 matches
Mail list logo