Bug#918655: Expanding the NEWS
Hi, Thanks to the maintainer for taking care of things so quickly. Could perhaps the NEWS file be expanded a little bit, though? I would not be surprised if my setup is quite common: I use passwordeval /usr/bin/pass foo | head -n 1 with msmtp, and have logging enabled. In such a setup, the apparmor profile has to be expanded to allow execution of pass, the default shell, and also to be allowed to write to the logfile. (Incidentally, if each user has a different log file set up, this sounds like a bit of a hassle). I personally ended up disabling the apparmor profile. Best, Gard
Bug#918655: Expanding the NEWS
On 2019-01-14 9:52 a.m., Gard Spreemann wrote: > Thanks to the maintainer for taking care of things so quickly. > > Could perhaps the NEWS file be expanded a little bit, though? I would > not be surprised if my setup is quite common: I use > > passwordeval /usr/bin/pass foo | head -n 1 Yes, thanks for reporting about this! > with msmtp, and have logging enabled. In such a setup, the apparmor > profile has to be expanded to allow execution of pass, the default > shell, and also to be allowed to write to the logfile. (Incidentally, if > each user has a different log file set up, this sounds like a bit of a > hassle). > > I personally ended up disabling the apparmor profile. Would you mind testing this base profile [1] and report back. If it still doesn't work for you, please provide the denial logs from dmesg. Regards, Simon 1: https://salsa.debian.org/sdeziel-guest/msmtp/blob/misc-fixes/debian/apparmor/usr.bin.msmtp
Bug#918655: Expanding the NEWS
On 2019-01-14 11:17 a.m., Gard Spreemann wrote: > > Simon Deziel writes: > >> Would you mind testing this base profile [1] and report back. If it >> still doesn't work for you, please provide the denial logs from dmesg. > > It works well! I realize that the game of adding more and more allowed > stuff to the profile might be futile, but pass and some common shells > seem like reasonable additions. Thanks for testing and reporting back. > Thanks a lot - and for maintaining msmtp! I'm not the maintainer, I'm merely helping to reduce the friction with the Apparmor profile I authored. I'm waiting for more feedback on this test branch and if everything looks good, I'll propose it for merging. Thanks again, Simon
Bug#918655: Expanding the NEWS
Simon Deziel writes: > Would you mind testing this base profile [1] and report back. If it > still doesn't work for you, please provide the denial logs from dmesg. It works well! I realize that the game of adding more and more allowed stuff to the profile might be futile, but pass and some common shells seem like reasonable additions. Thanks a lot - and for maintaining msmtp! Best, Gard
