[ archivemail-Bugs-1507394 ] os.setegid(0) Fails on RHEL4

[SourceForge.net <no...@so...>]

Bugs item #1507394, was opened at 2006-06-16 17:57
Message generated for change (Comment added) made by nikosch
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=456910&aid=1507394&group_id=49630

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
>Resolution: Works For Me
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
>Assigned to: Nikolaus Schulz (nikosch)
>Summary: os.setegid(0) Fails on RHEL4

Initial Comment:
On newer 2.6 kernels archivemail fails to set it's UID
and GID back to root and gives the error:

---------------------------------------------------------
/var/spool/mail/mwaltz: archived 0 of 1360 message(s)
in 6.7 seconds
changing effective groupid and userid back to root
Traceback (most recent call last):
  File "/usr/bin/archivemail", line 1298, in ?
    main()
  File "/usr/bin/archivemail", line 619, in main
    archive(mailbox_path)
  File "/usr/bin/archivemail", line 1057, in archive
    os.setegid(0)
OSError: [Errno 1] Operation not permitted
cleaning up ...
---------------------------------------------------------

This happens with pythton v2.2, 2.3, and 2.4.

The archive is created, but only if the users mbox and
archive directory are in the same group and have the
correct permissions.

Solutions I've come across range from disabling
SElinux(Done, still not luck), creating a c-wrapper for
the script since apparently the 2.6 kernels don't allow
python scripts to run as suid. A final suggestion is to
disable all SELinux options and recompile the kernel.




----------------------------------------------------------------------

>Comment By: Nikolaus Schulz (nikosch)
Date: 2007-11-09 02:22

Message:
Logged In: YES 
user_id=1594781
Originator: NO

This is strange. I must admit I have no clue at all about SELinux... 
Well, this bug is rather old, anonymous reporter, no one else has ever
complained, and I suspect this might have been a misconfigured machine.
Moreover, this the seteuid feature is now deprecated and will go away in
the near future. 
Closing. 


----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2006-06-16 18:11

Message:
Logged In: NO 

I should probably clarify that is only appears on RedHat
Enterprise Linux v4 systems. I tested it on Debian and it
doesn't  have this issue.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=456910&aid=1507394&group_id=49630