mail -s test root
and see in log next msgs:
Oct 6 10:18:47 host2 kernel: grsec: From 192.168.191.13: (root:U:/usr/sbin/exim4) change to uid 5007 denied for /usr/sbin/exim4[exim4:14774] uid/euid:0/0 gid/egid:8/8, parent /usr/sbin/exim4[exim4:14773] uid/euid:0/0 gid/egid:102/102
Oct 6 10:18:47 host2 kernel: grsec: From 192.168.191.13: (root:U:/usr/sbin/exim4) change to uid 5007 denied for /usr/sbin/exim4[exim4:14777] uid/euid:0/0 gid/egid:8/8, parent /usr/sbin/exim4[exim4:14776] uid/euid:0/0 gid/egid:102/102
here is my policy config for subject /usr/bin/exim4 for role root
- Code: Select all
subject /usr/sbin/exim4 o {
user_transition_allow Debian-exim
/ h
/etc h
/etc/aliases r
/etc/mtab r
/etc/resolv.conf r
/proc h
/proc/stat r
/proc/sys/kernel/ngroups_max r
/usr h
/usr/share/zoneinfo r
/var h
/var/lib/exim4/config.autogenerated r
/var/log/exim4/mainlog a
/var/run/nscd/socket rw
/var/log/exim4/paniclog a
/var/spool/exim4 rwc
/var/tmp
/var/mail rwcd
-CAP_ALL
+CAP_CHOWN
+CAP_FOWNER
+CAP_SETUID
+CAP_SETGID
+CAP_DAC_OVERRIDE
bind 0.0.0.0/32:25 stream dgram ip tcp
}
I had set
+CAP_SETUID
+CAP_SETGID
so , what else is wrong ?