Victor Duchovni:
> On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote:
> 
> > * Victor Duchovni <victor.ducho...@morganstanley.com>:
> > 
> > > Well, Postfix just executes "procmail" via your shell (when 
> > > mailbox_command
> > > contains shell metacharacters). Don't blame the messenger. The error 
> > > message
> > > is from your shell, which clearly reports not being able to run the
> > > /usr/bin/procmail executable.
> > 
> > Maybe smrsh?
> 
> Not at all likely. Postfix does not use "smrsh". With mailbox_command,
> Postfix explicitly uses the compiled-in path of the Bourne shell:
> 
>       (void) execl(_PATH_BSHELL, "sh", "-c", command, (char *) 0);
>       msg_fatal("execl %s: %m", _PATH_BSHELL);
> 
> It is mostly pointless to use smrsh with procmail, as procmail allows
> users to bypass the restrictions imposed by smrsh. This is explained
> in the smrsh manpage:
> 
>        Also, including mail filtering programs such as procmail(1)
>        is a very bad idea.  procmail(1) allows users to run arbitrary
>        programs in their procmailrc(5).

Postfix will use $local_command_shell for commands chosen by users.
However it will use /bin/sh for commands chosen by the administrator.

        Wietse

Reply via email to