OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Roger Buck (rogsaas.nsw.edu.au)
Date: Tue Oct 02 2001 - 05:31:55 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Using chrooted Postfix with procmail filter (see below) I get following
    error message:

       sendmail: fatal: chdir /var/spool/postfix: Permission denied

    I'd be very grateful if someone could please provide details for
    technique I should employ to solve this and any similar problem(s) I
    might encounter in future.

    I have tried all sorts of permutations of uid alias tables, moving file
    locations, searched newsgroups/faqs etc etc but am still overlooking the
    (maybe obvious) solution.

    In all other respects, the Postfix configuration for delivery of local
    email and external pipes (to Mailman for example) work fine.

    MORE INFORMATION:

    Using chrooted Postfix 20010228 with RH6.2 and procmail-3.21.

    I am trying to use a procmail sanitize filter to generate new email
    using:

    --snip--

     :0 h ci
        | ( \
            echo "To: $SECURITY_NOTIFY";\
            echo 'From: "Procmail Security daemon" <postmaster>';\
            echo 'Subject: SECURITY WARNING - possible email attack';\
            echo "X-Loop: EMAIL SECURITY WARNING $HOST $SECRET"; \
            echo ;\
            echo 'Trapped excessively long header:' ;\
            echo $HDR;\
            echo ;\
            echo $STATUS;\
            echo ;\
            echo 'Headers from message:';\
            echo ;\
            sed -e 's/^/> /' ;\
          ) | $SENDMAIL -U $SECURITY_NOTIFY

    --snip--

    My procmail.log amd maillog reveal:
       
    NOTIFY RECIPIENT
    sendmail: fatal: chdir /var/spool/postfix: Permission denied
    sendmail: fatal: chdir /var/spool/postfix: Permission
    denied

    --snip--

    Thanks,

    Roger over and out.
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users