The mailing list for listmasters using Sympa

[Bill Goins <address@concealed>]

Yep, that was it:

[root@listx etc]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      31

--
----------------------------------------------------------------------
Bill Goins
Information Technology Services
Georgetown College
Georgetown, KY 40324-1696
Email: address@concealed
Phone: (502)863-8003
----------------------------------------------------------------------
NOTICE:  This e-mail may contain information that is privileged, 
confidential, or otherwise exempt from disclosure under applicable law.  If 
you are not the intended recipient or it appears from the context or 
otherwise that you have received this e-mail in error, please permanently 
delete this message and disregard.
----------------------------------------------------------------------
Fry, don't be a hero. It's not covered by the health plan.  -- Hermes
-- Futurama


________________________________________
From: IKEDA Soji <address@concealed>
Sent: Wednesday, February 26, 2020 5:36 AM
To: Bill Goins
Cc: address@concealed
Subject: Re: [sympa-users] Problem with getting postfix to run 
/home/sympa/libexec/queue

CAUTION: This email originated from outside Georgetown College's Email 
System. DO NOT CLICK on any links or open attachments unless you recognize 
the sender and know the content is safe.



Hi Bill,

> 2020/02/26 1:04、Bill Goins <address@concealed>のメール:
>
> Hi, I'm in the process of continuing my efforts to setup sympa.
> I am stuck at the point of testing the execution of queue and bouncequeue
> from the aliases file.  I am getting in /var/log/maillog:
>
> Feb 25 10:06:57 listx postfix/qmgr[21419]: C1DF7DC6CC: 
> from=<address@concealed>, size=501, nrcpt=1 (queue active)
> Feb 25 10:06:57 listx local[21455]: fatal: execvp 
> /home/sympa/libexec/queue: Permission denied
> Feb 25 10:06:57 listx postfix/local[21454]: C1DF7DC6CC: 
> to=<address@concealed>, relay=local, delay=0.12, 
> delays=0.06/0.03/0/0.03, dsn=4.3.0, status=deferred (temporary failure. 
> Command output: local: fatal: execvp /home/sympa/libexec/queue: Permission 
> denied )
>
> The setup is for Sympa 6.2.44 on a Centos 7 system running postfix.  I am 
> following the directions for a single domain.
>
> [root@listx etc]# pwd
> /home/sympa/etc
>
> [root@listx src]# grep -e mydest -e sympa /etc/postfix/main.cf
> mydestination = $myhostname, localhost.$mydomain, localhost, 
> listx.georgetowncollege.edu
> alias_maps = hash:/home/sympa/etc/aliases.sympa.postfix, hash:/etc/aliases
> alias_database = hash:/home/sympa/etc/aliases.sympa.postfix, 
> hash:/etc/aliases
>
> [root@listx etc]# ls -tl aliases.sympa.postfix*
> -rw-r-----. 1 sympa sympa 12288 Feb 25 10:06 aliases.sympa.postfix.db
> -rw-r-----. 1 sympa sympa   590 Feb 24 20:55 aliases.sympa.postfix
>
> [root@listx etc]# cat aliases.sympa.postfix
> # Robot aliases for Sympa.
> sympa:                 "| /home/sympa/libexec/queue 
> address@concealed"
> listmaster:            "| /home/sympa/libexec/queue 
> address@concealed"
> bounce:                "| /home/sympa/libexec/bouncequeue 
> address@concealed"
> abuse-feedback-report: "| /home/sympa/libexec/bouncequeue 
> address@concealed"
> sympa-request:         postmaster
> sympa-owner:           postmaster
>
> [root@listx etc]# ls -l /home/sympa/libexec/queue 
> /home/sympa/libexec/bouncequeue
> -rwsr-xr-x. 1 sympa sympa 20264 Aug 23  2019 /home/sympa/libexec/bouncequeue
> -rwsr-xr-x. 1 sympa sympa 21112 Aug 23  2019 /home/sympa/libexec/queue
>
> Mail to sympa-owner passes through ok and comes back to me.
> Can anyone tell me what I've done wrong or forgotten?
>
> Somewhere, in the back of my mind and possibly a memory about sendmail,
> I think I need to tell postfix that queue is a permitted program
>

By any chance haven’t you disabled SELinux? It‘s a pitfall many people have 
fallen into.

Regards,

— Soji


>
>
>
>
>
>
> --
> ----------------------------------------------------------------------
> Bill Goins
> Information Technology Services
> Georgetown College
> Georgetown, KY 40324-1696
> Email: address@concealed
> Phone: (502)863-8003
> ----------------------------------------------------------------------
> NOTICE:  This e-mail may contain information that is privileged, 
> confidential, or otherwise exempt from disclosure under applicable law.  If 
> you are not the intended recipient or it appears from the context or 
> otherwise that you have received this e-mail in error, please permanently 
> delete this message and disregard.
> ----------------------------------------------------------------------
> Fry, don't be a hero. It's not covered by the health plan.  -- Hermes
> -- Futurama