PDA

View Full Version : Errore di privilegi in mail.info. Procmail o fetchmail?


Pirulicchio
26-06-2006, 13:59
L'errore che mi viene riportato č il seguente:
Jun 26 14:52:49 localhost fetchmail[7634]: 3 messages for mionome at pop.tiscali.it (5544 octets).
Jun 26 14:52:49 localhost fetchmail[7634]: reading message mionome@pop.tiscali.it:1 of 3 (2784 octets)
Jun 26 14:52:49 localhost procmail[8399]: Insufficient privileges to deliver to "admin"
Jun 26 14:52:49 localhost fetchmail[7634]: MDA returned nonzero status 77
Jun 26 14:52:49 localhost fetchmail[7634]: not flushed
Jun 26 14:52:51 localhost fetchmail[7634]: reading message mionome@pop.tiscali.it:2 of 3 (1507 octets)
Jun 26 14:52:51 localhost procmail[8400]: Insufficient privileges to deliver to "admin"
Jun 26 14:52:51 localhost fetchmail[7634]: MDA returned nonzero status 77
Jun 26 14:52:51 localhost fetchmail[7634]: not flushed
Jun 26 14:52:51 localhost fetchmail[7634]: reading message mionome@pop.tiscali.it:3 of 3 (1253 octets)
Jun 26 14:52:51 localhost procmail[8401]: Insufficient privileges to deliver to "admin"
Jun 26 14:52:51 localhost fetchmail[7634]: MDA returned nonzero status 77
Jun 26 14:52:51 localhost fetchmail[7634]: not flushed

Ma dove o a chi devo cambiare i privilegi??
Ciao....

Pirulicchio
03-07-2006, 13:22
up...
Ancora non sono riuscito a risolvere il problema, se non ho letto qui:
4. Security considerations (when installing procmail suid root)
-------------------------------------------------------------

If in EXPLICIT DELIVERY mode (typically when called from within sendmail)
procmail will ALWAYS change UID and gid to the RECIPIENT's defaults as soon as
it starts reading the recipient's $HOME/.procmailrc file.

If NOT in explicit delivery mode (typically when called from within the
recipient's $HOME/.forward file) procmail will ALWAYS change UID and gid to
the real uid and gid of the INVOKER (effectively losing any suid or sgid
privileges).

These two precautions should effectively eliminate any security holes because
procmail will always have the uid of the person whose commands it is executing.

To summarise, procmail will only behave better if made suid/sgid something, in
fact, making procmail suid/sgid something will *improve* security on systems
which have dynamically linked libraries.
pare che procmail quando viene eseguito da postfix o sendmail etc cambia automaticamente i permessi e riesce a processare la mail nelle varie home degli utenti, mentre io faccio eseguire procmail da fetchmail con un file /etc/fetchmailrc in questo modo (ecco una parte):
mda '/usr/bin/procmail -d %T'
is admin here options keep
il risultato e che procamil non ha i permessi giusti per inoltrare in questo caso ad admin, e da l'errore localhost procmail[8399]: Insufficient privileges to deliver to "admin",nel man ho trovato anche questo:
Insufficient privileges
Procmail either needs root privileges, or must
have the right (e)uid and (e)gid to run in deā[m
livery mode. The mail will bounce.
Non so proprio come risolvere.
Ciao...