From: Victor Duchovni on
On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote:

> * Victor Duchovni <Victor.Duchovni(a)morganstanley.com>:
>
> > Well, Postfix just executes "procmail" via your shell (when mailbox_command
> > contains shell metacharacters). Don't blame the messenger. The error message
> > is from your shell, which clearly reports not being able to run the
> > /usr/bin/procmail executable.
>
> Maybe smrsh?

Not at all likely. Postfix does not use "smrsh". With mailbox_command,
Postfix explicitly uses the compiled-in path of the Bourne shell:

(void) execl(_PATH_BSHELL, "sh", "-c", command, (char *) 0);
msg_fatal("execl %s: %m", _PATH_BSHELL);

It is mostly pointless to use smrsh with procmail, as procmail allows
users to bypass the restrictions imposed by smrsh. This is explained
in the smrsh manpage:

Also, including mail filtering programs such as procmail(1)
is a very bad idea. procmail(1) allows users to run arbitrary
programs in their procmailrc(5).

--
Viktor.

P.S. Morgan Stanley is looking for a New York City based, Senior Unix
system/email administrator to architect and sustain our perimeter email
environment. If you are interested, please drop me a note.

From: Wietse Venema on
Victor Duchovni:
> On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote:
>
> > * Victor Duchovni <Victor.Duchovni(a)morganstanley.com>:
> >
> > > Well, Postfix just executes "procmail" via your shell (when mailbox_command
> > > contains shell metacharacters). Don't blame the messenger. The error message
> > > is from your shell, which clearly reports not being able to run the
> > > /usr/bin/procmail executable.
> >
> > Maybe smrsh?
>
> Not at all likely. Postfix does not use "smrsh". With mailbox_command,
> Postfix explicitly uses the compiled-in path of the Bourne shell:
>
> (void) execl(_PATH_BSHELL, "sh", "-c", command, (char *) 0);
> msg_fatal("execl %s: %m", _PATH_BSHELL);
>
> It is mostly pointless to use smrsh with procmail, as procmail allows
> users to bypass the restrictions imposed by smrsh. This is explained
> in the smrsh manpage:
>
> Also, including mail filtering programs such as procmail(1)
> is a very bad idea. procmail(1) allows users to run arbitrary
> programs in their procmailrc(5).

Postfix will use $local_command_shell for commands chosen by users.
However it will use /bin/sh for commands chosen by the administrator.

Wietse

From: "Adrian P. van Bloois" on
* El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste:
> Hi,
> I just installed postfix 2.7.0.
> WIthout changes to the existing configuration of 2.6.5 I get this error
> using procmail as my mailbox_command:
> Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file )
> Anyone any ideas???
I have th thing working now with local delivery agent, so
mailbox_command is empty.
When I feed an e-mail to procmail it just works, when I change the
mailbox_command back to /usr/bin/procmail I get the same problem.
There's something rotten in the state of UNIX.


>
> Adrian
>
>
> --
> Adrian P. van Bloois
> Postbus 2575 email: adrian(a)accu.uu.nl
> 3500 GN Utrecht voice: +31-30-68-94649
> The Netherlands fax: ++31-30-68-94601
>
> The whole point of cooking is to get as much flavour out of the
> ingredients as possible.
> -- Delia SMith

--
Adrian P. van Bloois
Postbus 2575 email: adrian(a)accu.uu.nl
3500 GN Utrecht voice: +31-(0)-30-68-94649
The Netherlands fax: +31-30-68-94649

The whole point of cooking is to get as much flavour out of the
ingredients as possible.
-- Delia Smith

From: mouss on
Adrian P. van Bloois a �crit :
> * El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste:
>> Hi,
>> I just installed postfix 2.7.0.
>> WIthout changes to the existing configuration of 2.6.5 I get this error
>> using procmail as my mailbox_command:
>> Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file )
>> Anyone any ideas???
> I have th thing working now with local delivery agent, so
> mailbox_command is empty.
> When I feed an e-mail to procmail it just works, when I change the
> mailbox_command back to /usr/bin/procmail I get the same problem.
> There's something rotten in the state of UNIX.
>

do you have selinux/apparmor/... ?

From: "Adrian P. van Bloois" on
* El Sat, Feb 20, 2010 at 02:17:05PM +0100, escribiste:
> Adrian P. van Bloois a �crit :
> > * El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste:
> >> Hi,
> >> I just installed postfix 2.7.0.
> >> WIthout changes to the existing configuration of 2.6.5 I get this error
> >> using procmail as my mailbox_command:
> >> Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file )
> >> Anyone any ideas???
> > I have th thing working now with local delivery agent, so
> > mailbox_command is empty.
> > When I feed an e-mail to procmail it just works, when I change the
> > mailbox_command back to /usr/bin/procmail I get the same problem.
> > There's something rotten in the state of UNIX.
> >
>
> do you have selinux/apparmor/... ?
Nope!!!
WHen I execute procmail from the commandline it works perfectly. As soon
as I put it in my .forward or in the main.cf it fails.


--
Adrian P. van Bloois
Postbus 2575 email: adrian(a)accu.uu.nl
3500 GN Utrecht voice: +31-(0)-30-68-94649
The Netherlands fax: +31-30-68-94649

The whole point of cooking is to get as much flavour out of the
ingredients as possible.
-- Delia Smith