[Mageia-dev] [RFC] msec (nail) can't send reports to local users accounts - require an MTA?

[andre999]

Florian Hubold a écrit :
> Hello,
>
> during validation of validation of msec/sectool update candidates,
> a problem showed up: https://bugs.mageia.org/show_bug.cgi?id=1621
> Seems mailx (on behalf of msec) can't send mails to local user accounts
> due to missing sendmail, citing one of the comments:
>
> https://bugs.mageia.org/show_bug.cgi?id=2255#c25
> But sendmail (or alternative) is required for local delivery.
> Try it out for yourself
>
> $ mailx -v -s "test mail" root
> EOT
> /usr/lib/sendmail: No such file or directory
> "/home/derek/dead.letter" 9/214
> . . . message not sent.
>
> This results in msec reports ending as /dead.letter and never being
> sent to the user who was specified in msec configuraion or during
> initial installation of Mageia.
>
> So i added a require on sendmail to msec. But sendmail conflicts
> with vacation, and more importantly with postfix.
> So how to solve this mess? Do we want the reports to not be sent
> to some local user account, we can leave it like it is and i'll
> remove the require on sendmail.
>
> But if we want security reports to be sent to local users if they
> specify so, how to proceed further?

I have postfix installed, and it works nicely with msec messages.
So the problem with msec reports must be related to the configuration.
(I originally installed postfix under Mandriva, so that may be a factor.)

Note that in msec something like {userid}@localhost should be specified, to be 
sent to a local user.  Maybe we should display something like
"(use {userid}@localhost for a local user)"
in msec.
(I don't know offhand how to send to a local group.)

Before installing postfix, the messages went to /dead.letter as you note, which 
is awkward as it requires root privileges to remove older messages.

I just noticed that sendmail is a lot smaller, so I installed it in place of 
postfix, since that is all I use postfix for.  Hopefully it works with the 
default config.
It might be useful for msec to require one of postfix or sendmail.

-- 
André