Package: bsd-mailx

Version: 8.1.2-0.20220412cvs-1


In follow-up to https://groups.google.com/g/linux.debian.user/c/vsYHlu728Ig


$ echo hello | mail -s test xx...@yyy.xyz <https://groups.google.com/>
2023-08-20 14:39:30 1qXieQ-000Bpa-1P 1qXieQ-000Bpa-1P no recipients found in headers
Can't send mail: sendmail process failed with error code 1


however the same works fine when I put selinux in permissive state (no warnings shown in audit/dmesg).
This is NOT a configuration issue but looks like selinux compatibility issue

A quick ltrace says

1qXia0-000BPb-0a Failed to create spool file /var/spool/exim4//input//1qXia0-000BPb-0a-D: Permission denied


However there are no avc: messages for me to allow this through in my selinux module
I even tried a custom policy

allow unconfined_t exim_spool_t:file { open read write create };
allow unconfined_t exim_spool_t:dir { open read write };


since /var/spool/exim4/input has exim_spool_dir set in it
ls -lZd

drwxr-x---. 2 Debian-exim Debian-exim system_u:object_r:exim_spool_t:s0 4096 Aug 22 00:10 /var/spool/exim4/input

I cant fine any booleans either ..

Many scripts including chkrootkit and tripwire are failing because mail cannot send mails(becauses debian uses bsd-mailx as default)

--
Bhasker C V
Secure Mails:http://keys.gnupg.net/pks/lookup?op=get&search=0x4D05FEEC54E47413
Registered Linux User: #306349

Reply via email to