Re: [Vacation-list] Vacation problem

On Thu, 14 Jun 2007, Sebastian Chociwski wrote:

> Hello,

Hello Sebastian,  sorry for the delay in getting back to you!

You tried to email the vacation-announce list which is only for announcemen=
ts=20
of the vacation program, there is another list called vacation-list for=20
discussion of the program.  I have copied this message to that list as well.

https://lists.sourceforge.net/lists/listinfo/vacation-list

> I use opensuse 10.1 and install vacation package to get automatic replays.

Understood.  I don't use SuSE I'm afraid, but I'll do my best!

> Unfortunally something is wrong and i can't get what is that:
> I have different sympthoms to diferent users ; for users with home
> directory in main /home
> catalog (/home/$user) and with simple .forward file I got error :
> Jun 14 08:58:37 $serwer postfix/local[22155]: EE6B414055:
> to=3D<$user@$serwer>, relay=3Dlocal, delay=3D1, status=3Dsent (delivered =
to
> mailbox) Jun 14 08:58:37 $serwer local[22217]: fatal: execvp
> /usr/bin/vacation: Operation not permitted.

My guess for this is that it could be something to do with AppArmor in=20
OpenSuSE, certainly Googling around seems to show up similar issues with it.

Such problems would be reported in /var/log/audit/audit.log I believe.

> But some of my users are in /home/%users/%domain/$user and with same
> (expect $user part) .forward file I got this error :
> Jun 14 08:07:32 $serwer postfix/local[21226]: warning: cannot open file
> /home/$path/ewik/.forward: Operation not permitted.

Again, I suspect that is also the issue here.

> I just install rpm from opensuse with yast and change nothing.

According to the following link the correct solution for this is to=20
run "logprof" as root (and not confined by AppArmor) and then let it insert=
=20
the correct rules for vacation and Postfix when prompted.

http://archive.cert.uni-stuttgart.de/suse-security/2006/07/msg00063.html

Let me know how you go!

All the best,
Chris
=2D-=20
 Chris Samuel  :  http://www.csamuel.org/  :  Melbourne, VIC

This email may come with a PGP signature as a file. Do not panic.
=46or more info see: http://en.wikipedia.org/wiki/OpenPGP