snac2

commit 80ff16b21c7081165d346ff94b450f432a82ee47
parent 67431130162b1027cc3894f947be309b2daa3cd3
Author: shtrophic <christoph@liebender.dev>
Date:   Tue, 19 Nov 2024 21:45:21 +0100

make sendmail executable if configured

Diffstat:
M
sandbox.c
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/sandbox.c b/sandbox.c
@@ -26,9 +26,9 @@ void sbox_enter(const char *basedir)
 
     const char *address = xs_dict_get(srv_config, "address");
 
-#if defined (__OpenBSD__)
     int smail = !xs_is_true(xs_dict_get(srv_config, "disable_email_notifications"));
 
+#if defined (__OpenBSD__)
     srv_debug(1, xs_fmt("Calling unveil()"));
     unveil(basedir,                "rwc");
     unveil("/tmp",                 "rwc");
@@ -161,6 +161,9 @@ void sbox_enter(const char *basedir)
     if (*address == '/')
         LANDLOCK_PATH(address, LL_UNIX);
 
+    if (smail)
+        LANDLOCK_PATH("/usr/sbin/sendmail", LL_X);
+
     if (abi > 3) {
         if (*address != '/') {
             LANDLOCK_PORT(