procmail
[Top] [All Lists]

Re: Binary will not run from rc filter

2007-09-19 14:41:34
On 9/19/07, steve verlander <stevenver(_at_)gmail(_dot_)com> wrote:
This is what I get when sendmail runs procmail:

LOG=uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
context=root:system_r:procmail_t:s0-s0:c0.c1023"

An important point that you left out before is that procmail is
running as root at the time of the failure.  The previous implication
was that it's running as "someuser" e.g. you references to
/home/someuser/bin/scripts/filter_app.

It may be that all you need is to put

DROPPRIVS=yes

before the execution of the filtering recipe, so that the application
runs as the user for whom mail is being delivered.

LOG=uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
context=root:system_r:unconfined_t:SystemLow-SystemHigh"

Sean is dead-on here with his remarks about the SELinux context.
____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>