dan1
2007-Apr-16 16:46 UTC
[CentOS] sendmail smrsh symlinks not working against php scripts
Hello. I am trying to forward the e-mails received to one address towards a php script. I am trying all I can but nothing does. I have edited my /etc/aliases file and added this line. ecard-bounce: "|/usr/bin/php /etc/smrsh/ecardbounce.php" Then, of course I do a 'newaliases'. In my /etc/smrsh I have placed the symbolic link defined above, which has been created this way: ln -s /home/my/scripts/ecardbounce.php /etc/smrsh/ecardbounce.php When using this configuration, I get the following error back by email: ----- The following addresses had permanent fatal errors ----- "|/usr/bin/php /etc/smrsh/ecardbounce.php" (reason: 255) (expanded from: <ecard-bounce at myserver.com>) ----- Transcript of session follows ----- Status: 404 Content-type: text/html X-Powered-By: PHP/4.3.9 No input file specified. 554 5.3.0 unknown mailer error 255 However, if I put a hardlink instead of the symlink, all works fine! The permissions of the symlink and the file linekd are all 777. Has anyone already had this problem before, or would anyone have an idea of the problem? Thanks, Daniel
R P Herrold
2007-Apr-16 16:53 UTC
[CentOS] sendmail smrsh symlinks not working against php scripts
On Mon, 16 Apr 2007, dan1 wrote:> I am trying to forward the e-mails received to one address towards a php > script. > I am trying all I can but nothing does. > > I have edited my /etc/aliases file and added this line. > ecard-bounce: "|/usr/bin/php /etc/smrsh/ecardbounce.php" > > Then, of course I do a 'newaliases'. > In my /etc/smrsh I have placed the symbolic link defined above, which has > been created this way: > ln -s /home/my/scripts/ecardbounce.php /etc/smrsh/ecardbounce.phpWouldn't smrsh need to include /usr/bin/php as well in its permitted subshell applications links in /etc/smrsh/? the object of the binary is not checked -- the binary is Note: I do not pass on the security advisability of this act, just sendmail syntax It has been a long time since I added items to the sendmail permitted applications list as it is a known scurity cesspool. -- Russ Herrold