Bug 201658

Summary:	Squirrelmail configuration problems.
Product:	Red Hat Enterprise Linux 4	Reporter:	Ian Mortimer <i.mortimer>
Component:	selinux-policy-targeted	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED ERRATA	QA Contact:	BaseOS QE <qe-baseos-auto>
Severity:	low	Docs Contact:
Priority:	medium
Version:	4.0	CC:	dwalsh, mhlavink, mkoci, mmalik, sgrubb
Target Milestone:	---	Keywords:	SELinux
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-05-18 20:36:39 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ian Mortimer 2006-08-08 00:37:22 UTC

Description of problem:
Squirrelmail configtest.php reports 

   ERROR: Location of sendmail program incorrect (/usr/sbin/sendmail)!

The squirrelmail setup works fine but the false error stops configtest
from reporting on the rest of the configuration


Version-Release number of selected component (if applicable):
1.4.6-7.el4

How reproducible:
Always


Steps to Reproduce:
1. Setup a working squirrelmail configuration with defaults for sendmail/smtp
2. Go to http://whatever/webmail/src/configtest.php
3.
  
Actual results:
configtest reports the above error.


Expected results:
all tests should pass.


Additional info:
Possibly this is because /usr/sbin/sendmail on rhel4 is a link.

Configuring smtp to localhost instead of sendmail removes the
error message and configtest reports all is well with the rest
of the configuration.

Essentially this is cosmetic since it doesn't stop a good 
configuration from working but it would make it more difficult
to diagnose a non-working configuration.

Comment 1 Ian Mortimer 2006-08-10 02:20:52 UTC

Got the same result with a fresh install of squirrelmail so it's not a local
configurataion issue.  

Running:

   php /usr/share/squirrelmail/src/configtest.php

from the command line either as root or apache reports sendmail OK!

Comment 2 Tomas 2007-01-27 12:36:39 UTC

Are you sure that it is not related to SELinux restrictions?

SquirrelMail 1.4.6 does not handle pclose errors in Sendmail delivery class. Are
you sure that you can send emails, when configtest.php reports that location of
sendmail program incorrect? SquirrelMail might report that email was sent and
copy was saved in Sent folder, but recipient never gets it.

Comment 3 Ian Mortimer 2007-01-28 22:16:04 UTC

You're right.  It's SELinux.  After `setenforce 0' configtest reports all OK.
Enforcing mode reports:

   kernel: audit(1170022308.085:14): avc:  denied  { read } for  pid=28752
comm="httpd" name="sendmail" dev=dm-2 ino=508085 scontext=root:system_r:httpd_t
tcontext=user_u:object_r:sbin_t tclass=lnk_file

It's been working fine for 6 months (with SELinux in enforcing mode) so it still
looks like a reporting problem only.


--
Ian

Comment 4 Michal Hlavinka 2008-11-04 13:36:44 UTC

still exists in rhel 4.7,
squirrelmail works with selinux=permissive, complains with selinux=enforcing

Probably job for selinux

Comment 5 RHEL Program Management 2009-01-26 17:31:00 UTC

This request was evaluated by Red Hat Product Management for
inclusion, but this component is not scheduled to be updated in
the current Red Hat Enterprise Linux release. If you would like
this request to be reviewed for the next minor release, ask your
support representative to set the next rhel-x.y flag to "?".

Comment 7 Miroslav Grepl 2009-02-12 09:58:50 UTC

Fixed in selinux-policy-targeted-1.17.30-2.151.el4

Comment 11 errata-xmlrpc 2009-05-18 20:36:39 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-1026.html