Re: [mod-security-users] Anyone know how to get php'smail() to workwith mod_security chroot?

[m0nkey <poo...@wa...>]

Hello Ivan

Thanks for replying again. I'm not too familiar with strace. I'm not able
to follow the trace when I try to get mail.. Can someone point me in the
right direction. Here is what I've been tring to do:


strace -fF -p `pidof -s apache2`

When I run this.. it just sits on:

Process 9862 attached - interrupt to quit
semop(9633795, 0xb7d9eb4c, 1 <unfinished ...>


Thanks much
pb

> m0nkey wrote:
>> I've installed mini_sendmail and dropped it in my jail:
>>
>> /var/chroot/apache/usr/sbin/mini_sendmail
>>
>> I then changed the sendmail_path in /etc/php/apache2-php4/php.ini to
>> either:
>> /var/chroot/apache/usr/sbin/mini_sendmail
>> or
>> /usr/sbin/mini_sendmail
>>
>> I get the exact same result.. which is no mail.. no error. Just to
>> clarify, I restart the service with every change.
>>
>> I also noticed in your box (Apache Security p.47).. that you mention
>> adding SMTP=localhost for this case.. I also have that set with no luck.
>
>    Unfortunatelly that's an error, which I failed to spot in time to
>    correct. Delivery through SMTP only works on Windows (and Netware I
>    think).
>
>
>> Any ideas how to get this working is greatly appreciated.
>
>    Use strace to figure out what PHP wants to do. My guess is that it
>    tries to execute sendmail through a shell, so you'll probably
>    need /bin/sh there as well.
>
> --
> Ivan Ristic
> Apache Security (O'Reilly) - http://www.apachesecurity.net
> Open source web application firewall - http://www.modsecurity.org
>
>


______________________________________
Get your FREE 100MB email today at http://www.wapda.com