[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#5326: mailagent's file locking doesn't work; file permission wrong



The only thing that I could get to work was to add myself to the mail
group.  With the previous setup I described, that seems to work fine.

Here are all the things I tried that didn't work:

> 2 - make mailagent setgid mail and use both locking methods (safer).

If you make the mailagent executable g+s, you get this error from the
filter program:

96/11/08 14:18:39 filter[1691]: ERROR mailagent returned status 2

And this in the errors file:

  Args must match #! line at /usr/bin/mailagent line 1.

If you set the filter setgid to the mail group, you get the same thing
but this in the errors file:

  No -S allowed while running setgid.

If you set the filter setuid to the mail group, you get this error
from sendmail:
~>mailq
OAA01944        1 Fri Nov  8 14:36 <swift@aleph.bu.edu>
                 (mailer prog died with signal 10)
                                   "| exec /home/swift/.mailagent-stuff/filter >

If as per the dox below you make a private copy of the C filter program
and make it setuid and setgid to yourself, and make .forward invoke
your private copy, you still get the same problem with locking.

FYI, the following paragraph in the mailagent man page may apply to
Debian sendmail, I still don't understand all this fully.

       On some platforms, sendmail does not correctly  reset  its
       UID  when processing mails in its own queue. In that case,
       you need to get a private copy of the C filter program and
       make it setuid to yourself. The filter will then correctly
       reset its UID if invoked with an effective  UID  different
       from  yours  (it  may also require the setgid bit to reset
       GID as well).  If this is indeed the case on your  system,
       make sure you use the path configuration variable to set a
       proper PATH, as the filter will spawn a perl process  with
       the '-S' option, looking for a mailagent script.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: