[opensuse] .forward operation not permitted
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
"operation not permitted" by who? postfix? apparmor? procmail? Just out of curiosity, could you share the actual message from the log? Joe -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
joe wrote:
Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
"operation not permitted" by who? postfix? apparmor? procmail? Just out of curiosity, could you share the actual message from the log?
Joe
Jul 3 18:30:58 voip01 sendmail[29657]: l63IUwP3029656: forward /home/jca/.forward: Operation not permitted -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Bruce Ferrell wrote:
joe wrote:
Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
"operation not permitted" by who? postfix? apparmor? procmail? Just out of curiosity, could you share the actual message from the log?
Joe
Jul 3 18:30:58 voip01 sendmail[29657]: l63IUwP3029656: forward /home/jca/.forward: Operation not permitted
Ah, OK - so you're actually using *sendmail*. it's been a few years, but as a previous poster pointed out, you can force sendmail to honor the .forward files, though clearly it's not happy about it. FWIW, postfix still works fine with .forward files, it's a drop-in replacement for sendmail, and it's also the default MTA in suse, so I'm curious how you ended up with sendmail... Joe -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
joe wrote:
Bruce Ferrell wrote:
joe wrote:
Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
"operation not permitted" by who? postfix? apparmor? procmail? Just out of curiosity, could you share the actual message from the log?
Joe
Jul 3 18:30:58 voip01 sendmail[29657]: l63IUwP3029656: forward /home/jca/.forward: Operation not permitted
Ah, OK - so you're actually using *sendmail*. it's been a few years, but as a previous poster pointed out, you can force sendmail to honor the .forward files, though clearly it's not happy about it.
FWIW, postfix still works fine with .forward files, it's a drop-in replacement for sendmail, and it's also the default MTA in suse, so I'm curious how you ended up with sendmail...
Joe
company policy -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tuesdayen den 3 July 2007 20.11.57 Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
Do you run sendmail as another user than root? If so... that user must have access to write to these files. Also you probably have to configure "confDONT_BLAME_SENDMAIL" in your linux.mc file. Note that this will definitely compromise system security and should not be used unless absolutely necessary. Please see http://www.sendmail.org/tips/DontBlameSendmail.php Regards /Per-Olov -- GPG keyID: 4DB283CE GPG fingerprint: 45E8 3D0E DE05 B714 D549 45BC CFB4 BBE9 4DB2 83CE GPG key: http://keyserv.nic-se.se:11371/pks/lookup?op=get&search=0xCFB4BBE94DB283CE -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Per-Olov Sjöholm wrote:
On Tuesdayen den 3 July 2007 20.11.57 Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
Do you run sendmail as another user than root? If so... that user must have access to write to these files.
Also you probably have to configure "confDONT_BLAME_SENDMAIL" in your linux.mc file. Note that this will definitely compromise system security and should not be used unless absolutely necessary. Please see http://www.sendmail.org/tips/DontBlameSendmail.php
Regards /Per-Olov
That's set. It seems to be something to do with the vacation program -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tuesdayen den 3 July 2007 23.03.05 Bruce Ferrell wrote:
Per-Olov Sjöholm wrote:
On Tuesdayen den 3 July 2007 20.11.57 Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
Do you run sendmail as another user than root? If so... that user must have access to write to these files.
Also you probably have to configure "confDONT_BLAME_SENDMAIL" in your linux.mc file. Note that this will definitely compromise system security and should not be used unless absolutely necessary. Please see http://www.sendmail.org/tips/DontBlameSendmail.php
Regards /Per-Olov
That's set. It seems to be something to do with the vacation program
You have to give better info than that to get help. Increase logging in sendmail. But now you said it's not sendmail (as it's configured as it should....). And we do not not anything about your vacation program or how everything is set up. Regards /Per-Olov -- GPG keyID: 4DB283CE GPG fingerprint: 45E8 3D0E DE05 B714 D549 45BC CFB4 BBE9 4DB2 83CE GPG key: http://keyserv.nic-se.se:11371/pks/lookup?op=get&search=0xCFB4BBE94DB283CE -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Per-Olov Sjöholm wrote:
On Tuesdayen den 3 July 2007 23.03.05 Bruce Ferrell wrote:
Per-Olov Sjöholm wrote:
On Tuesdayen den 3 July 2007 20.11.57 Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
Do you run sendmail as another user than root? If so... that user must have access to write to these files.
Also you probably have to configure "confDONT_BLAME_SENDMAIL" in your linux.mc file. Note that this will definitely compromise system security and should not be used unless absolutely necessary. Please see http://www.sendmail.org/tips/DontBlameSendmail.php
Regards /Per-Olov
That's set. It seems to be something to do with the vacation program
You have to give better info than that to get help.
Increase logging in sendmail. But now you said it's not sendmail (as it's configured as it should....). And we do not not anything about your vacation program or how everything is set up.
Regards /Per-Olov
Sorry. I was reporting back findings. It the stock vacation program that comes with suse with a short message for the upcoming holiday. Sendmail is logging at 9 now, I know I can go higher, but I'll do that when the office clear and I can really rock and roll on the mail server -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Jul 03, 2007 at 11:11:57AM -0700, Bruce Ferrell wrote:
I'm trying to use the vacation program from .forward with sendmail and I'm seeing operation not permitted in /var/log/mail. How can I make this work?
It's possible that you may have some AppArmor profiles for procmail or sendmail installed on your system by default. Check /var/log/audit/audit.log or /var/log/messages for some REJECT lines from AppArmor. You can use the aa-logprof (or just 'logprof', if your system is old enough) to be prompted to fix up these problems, if any. (You can see the profiles on your system with ls /etc/apparmor.d/ or cat /sys/kernel/security/apparmor/profiles or cat /subdomain/profiles, again depending upon age. :) Hope this helps
participants (4)
-
Bruce Ferrell -
joe -
Per-Olov Sjöholm -
Seth Arnold