https://bugs.exim.org/show_bug.cgi?id=1925
Bug ID: 1925
Summary: Fallback to local SMTP if cannot get root privs
Product: Exim
Version: N/A
Hardware: x86
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: General execution
Assignee: nigel@???
Reporter: sf@???
CC: exim-dev@???
Under linux, there are various methods to sandbox a process. To be secure, most
of them prevent the sandboxed process from gaining any additional privileges,
i.e. the no_new_privs bit is set (see man prctl). If such a process calls
/usr/lib/sendmail, the suid bit on exim won't have any effect. As a result,
mail delivery fails.
Exim should fallback to delivery by SMTP to 127.0.0.1 or via a unix domain
socket.
The problem commonly appears whith php and cgi scripts that are run via apache
httpd while the mpm-itk module is loaded. See
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797653
--
You are receiving this mail because:
You are on the CC list for the bug.
