Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-12 Thread Simon Deziel
The updated Apparmor profile and debian/NEWS were proposed for integration: https://salsa.debian.org/kolter/msmtp/merge_requests/1 Regards, Simon

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-12 Thread tony mancill
Package: msmtp Version: 1.8.1-2 Followup-For: Bug #918820 Hi, I just wanted to +1 the updated AppArmor profile attached to the bug report. I suspect there will be a number of users who have their msmtp configured with passwordeval as per the ArchLinux wiki [1], so supporting this configuration

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-10 Thread Simon Deziel
On 2019-01-10 9:54 a.m., Kai Weber wrote: > * Simon Deziel : > >> Actually, please use this new attached profile which is identical in >> purpose but uses better names. > > The profile works with the secret-tool solution. Great, thanks for testing, I really appreciate it. > If the maintainers

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-10 Thread Kai Weber
* Simon Deziel : > Actually, please use this new attached profile which is identical in > purpose but uses better names. The profile works with the secret-tool solution. If the maintainers choose to restrict the use of "secret helpers" to only gpg* and secret-tool than this should be mentioned

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-09 Thread Simon Deziel
On 2019-01-09 8:57 p.m., Simon Deziel wrote: > Could you give a try to the attached profile and report back? Actually, please use this new attached profile which is identical in purpose but uses better names. Thanks, Simon # Author: Simon Deziel #include /usr/bin/msmtp

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-09 Thread Simon Deziel
On 2019-01-09 11:52 a.m., Kai Weber wrote: > passwordeval python -c "import keyring; print keyring.get_password('smtp', > 'kai.we...@glorybox.de')" > passwordeval secret-tool lookup service smtp username kai.we...@glorybox.de The python version would be hard to secure and is probably not widely

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-09 Thread Kai Weber
* Simon Deziel : I did two tests. One with passwordeval using python, one with passwordeval using secret-tool. passwordeval python -c "import keyring; print keyring.get_password('smtp', 'kai.we...@glorybox.de')" passwordeval secret-tool lookup service smtp username kai.we...@glorybox.de Find

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-09 Thread Simon Deziel
Hi Kai, On 2019-01-09 10:03 a.m., kai.we...@glorybox.de wrote: > With the AppArmor profile shipped the 'passwordeval' options does not > work anymore. I tried using the permitted "gpg" or "secret-tool" but > this did not work. > > msmtp uses popen(3) which in turn seems to exec /bin/dash which

Bug#918820: msmtp: AppArmor profile makes passwordeval unusable

2019-01-09 Thread kai . weber
Package: msmtp Version: 1.8.1-2 Severity: important Dear Maintainer, With the AppArmor profile shipped the 'passwordeval' options does not work anymore. I tried using the permitted "gpg" or "secret-tool" but this did not work. msmtp uses popen(3) which in turn seems to exec /bin/dash which is