> -----Original Message-----
> From: Wietse Venema [mailto:[EMAIL PROTECTED]
> Sent: 17 October 2008 11:48
> To: Paul Cocker
> Cc: postfix users list
> Subject: Re: Unable to attach disclaimer - permission denied
>
> Paul Cocker:
> > I'm trying to setup disclaimers for e-mails using altermime. I've
> > found a guide -
> >
> http://www.howtoforge.com/add-disclaimers-to-outgoing-emails-with-alte
> > rm ime-postfix-debian-etch, and have set everything up accordingly.
> >
> > I've added the following lines to master.cf
> >
> > smtp inet n - n - - smtpd
> > -o content_filter=dfilt:
> >
> > dfilt unix - n n - - pipe
> > flags=Rq user=filter argv=/etc/postfix/disclaimer -f
> ${sender} --
> > ${recipient}
> >
> > And the following files has been created
> >
> > -rwxr-x--- 1 root filter 781 Oct 13 08:50 /etc/postfix/disclaimer
> >
> > User exists:
> >
> > filter:x:100:101:Postfix
> Filters:/var/spool/filter:/bin/bash (I assume
> > the shell can change, but I want a successful test first)
> >
> > Groups:
> >
> > filter:x:101:
> >
> > However, e-mail in the queue generates the following error:
> >
> > Oct 17 10:50:36 server postfix/pipe[3004]: EE5DA1F80042:
> > [EMAIL PROTECTED], relay=dfilt, delay=72945, delays=72945/0/0/0.01,
> > dsn=4.3.0, status=deferred (temporary failure. Command output: pipe:
> > fatal: pipe_command: execvp /etc/postfix/disclaimer:
> Permission denied
> > )
> >
> > I tried a chmod 777 on the disclaimer file, but it doesn't make a
> > difference, so clearly something more fundamental is wrong, but I
> > don't know what.
>
> Try: SELINUX, APPARMOR, and so on.
>
> Wietse
>
I'm hoping I can narrow it down so that when it comes to tackling
something outside my skillset, like SELinux, I will at least know where
to focus my research :)
The messages log contains a slight different variation, which I'm hoping
might provide a more precise idea of the problem:
Oct 17 11:29:07 server kernel: audit(1224239347.861:12): avc: denied {
execute } for pid=3055 comm="pipe" name="disclaimer" dev=dm-0
ino=10223661 scontext=system_u:system_r:postfix_pipe_t:s0
tcontext=user_u:object_r:postfix_etc_t:s0 tclass=file
Oct 17 11:29:07 server kernel: audit(1224239347.868:13): avc: denied {
write } for pid=3054 comm="pipe" name="flush" dev=dm-1 ino=33030181
scontext=system_u:system_r:postfix_pipe_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=sock_file
I assume the second message is as a result of the first, so it's the
first which is important.
Some brief research suggests this is SELinux so I'll go see what
progress I can make on that.
Thanks.
TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047),
TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897), TNT
Post North Ltd (05701709), TNT Post South West Ltd (05983401), TNT Post
Midlands Limited (6458167)and TNT Post London Limited (6493826). Emma's Diary
and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd
(02556692). All companies are registered in England and Wales; registered
address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire,
SL7 1HY.
