Bob Proulx wrote: > It appears that systemd is setting NoNewPrivileges=yes for apache and > if I read the documentation correctly this will definitely break > things in the way we are seeing. I have removed that setting and am > trying things again.
That seems to have been the problem. I upgraded all of the packages that I had downgraded during testing and restarted all. I just tested this with a different ticket and it sent the mail okay. The root cause of the problem appears to have been over exuberant hardening from someone setting NoNewPrivileges=yes in systemd for the apache processes and as that prevents all suid in child processes it basically breaks anything and everything that calls out to subprocesses such as sending email with /usr/sbin/sendmail and other things. Bob
