Re: [SPAM?]: Re: [mod-security-users] Anyone know how to get php's mail() to workwith mod_security chroot?

[Ivan R. <iv...@we...>]

m0nkey wrote:
> I've installed mini_sendmail and dropped it in my jail:
> 
> /var/chroot/apache/usr/sbin/mini_sendmail
> 
> I then changed the sendmail_path in /etc/php/apache2-php4/php.ini to either:
> /var/chroot/apache/usr/sbin/mini_sendmail
> or
> /usr/sbin/mini_sendmail
> 
> I get the exact same result.. which is no mail.. no error. Just to
> clarify, I restart the service with every change.
> 
> I also noticed in your box (Apache Security p.47).. that you mention
> adding SMTP=localhost for this case.. I also have that set with no luck.

   Unfortunatelly that's an error, which I failed to spot in time to
   correct. Delivery through SMTP only works on Windows (and Netware I
   think).


> Any ideas how to get this working is greatly appreciated.

   Use strace to figure out what PHP wants to do. My guess is that it
   tries to execute sendmail through a shell, so you'll probably
   need /bin/sh there as well.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org