全球procmailrc文件和sendmail的执行权

Question

我用下面的全球的procmail配置文件（在/ etc/procmailrc文件）我的Debian杰西的邮件服务器上设置的procmail：

SHELL="/bin/bash" 
DELIVER="/usr/lib/dovecot/deliver" 
LOGFILE="$HOME/.procmail.log" 
DEFAULT="$HOME/Maildir/" 
MAILDIR="$HOME/Maildir/" 
ORGMAIL="$HOME/Maildir/" 
# VERBOSE=on 

# Invoke spambayes 
:0 fw 
| sb_filter -d /home/shared_directories/spambayes 

# If the mail contains a dangerous file, send it to the admin. 
:0 wB 
* ^((Content-Disposition:.*(|$)[ ]*filename)|(Content-Type:.*(|$)[ ]*name))=.*\.(0|000|386|3gr|7z|7z\.001|7z\.002|9|a00|a01|a02|ace|add|ade|aepl|agg|ain|alz|apz|ar|arc|archiver|arh|ari|arj|ark|aru|asp|asr|atm|aut|b1|b64|ba|bas|bat|bh|bhx|bin|bkd|blf|bll|bmw|bndl|boo|bps|bqf|buk|bundle|bup|bxz|bz|bz2|bza|bzip|bzip2|c00|c01|c02|c10|car|cb7|cba|cbr|cbt|cbz|cc|cdz|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|comppkg_hauptwerk_rar|comppkg\.hauptwerk\.rar|cp9|cpgz|cpl|cpt|crt|ctbl|cxarchive|cxq|cyw|czip|dar|dbd|dbx|dd|deb|delf|dev|dgc|dist|dl_|dlb|dli|dll|dllx|docm|dom|drv|dx|dxz|dyv|dyz|dz|ecs|efw|egg|epi|exe|exe1|exe_renamed|ezt|f|fag|fdp|fjl|fnr|fon|fp8|fuj|fzbz|fzpz|gca|gmz|gz|gz2|gza|gzi|gzip|gzquar|ha|hbc|hbc2|hbe|hki|hki1|hki2|hki3|hlp|hlw|hpk|hsq|hta|hts|hyp|iadproj|ice|inf|ins|ipg|ipk|ish|isp|isx|ita|iva|iws|ize|j|jar|jar\.pack|jgz|jic|js|jse|jsonlz4|kcd|kgb|kz|layout|lbr|lemon|let|lha|libzip|lik|lkh|lnk|lnx|lok|lpaq5|lqr|lz|lzh|lzm|lzma|lzo|lzx|md|mdb|mde|mfu|mint|mjg|mjz|mou|mpkg|msc|msi|msp|mst|mzp|nex|nls|nz|oar|ocx|osa|oz|ozd|p01|p19|package|pack\.gz|pae|pak|paq6|paq7|paq8|paq8f|paq8l|paq8p|par|par2|pax|pbi|pcd|pcv|pcx|pea|pet|pf|pgm|php3|pid|pif|pim|pit|piz|pkg|plc|pr|psz|pup|puz|pwa|qda|qit|qrn|r0|r00|r01|r02|r03|r1|r2|r21|r30|rar|reg|rev|rhk|rk|rna|rnc|rp9|rpm|rsc_tmp|rte|rz|s00|s01|s02|s7p|s7z|sar|sbx|scr|sct|sdc|sdn|sea|sen|sfg|sfs|sfx|sh|shar|shb|shk|shr|shs|sifz|sit|sitx|ska|smm|smpf|smtmp|snappy|snb|sop|spam|spt|sqx|srep|ssy|stproj|swf|sy_|sys|tar\.bz2|tar\.gz|tar\.gz2|tar\.lz|tar\.lzma|tar\.xz|tar\.z|taz|tbz|tbz2|tg|tgz|tko|tlz|tlzma|tps|trs|tsa|tti|tx_|txs|txz|tz|uc2|ufs\.uzip|uha|upa|url|uzip|uzy|vb|vba|vbe|vbs|vbx|vem|vexe|vsi|vxd|vzr|wa|waff|war|wlb|wlpginstall|wmf|wot|ws|wsc|wsf|wsh|xar|xdu|xef|xez|xir|xlm|xlv|xmcdz|xnt|xnxx|xtbl|xx|xz|xzm|y|yz|yz1|z|z01|z02|z03|z04|zap|zfsendtotarget|zi|zip|zipx|zix|zl|zoo|zpi|zsplit|zvz|zw|zz) 
{ 
:0 fw 
| formail -I "X-Dangerous-Attachment: YES" 

:0 w 
! spam@localhost 
} 

# Handle ham: Send a copy to the admin 
:0 c 
* ^X-Spambayes-Classification: ham 
! spam@localhost 

# Handle spam and unsure: Send the mail to the admin 
:0 w 
* ^X-Spambayes-Classification: (spam|unsure) 
! spam@localhost 

:0 w 
| $DELIVER 

随着上述全球配置文件，我得到以下日志输出：

procmail: [7287] Mon Jul 25 19:57:52 2016 
procmail: Executing "sb_filter,-d,/home/shared_directories/spambayes" 
procmail: [7287] Mon Jul 25 19:57:53 2016 
procmail: No match on "^((Content-Disposition:.*(|$)[ ]*filename)|(Content-Type:.*(|$)[ ]*name))=.*\.(0|000|386|3gr|7z|7z\.001|7z\.002|9|a00|a01|a02|ace|add|ade|aepl|agg|ain|alz|apz|ar|arc|archiver|arh|ari|arj|ark|aru|asp|asr|atm|aut|b1|b64|ba|bas|bat|bh|bhx|bin|bkd|blf|bll|bmw|bndl|boo|bps|bqf|buk|bundle|bup|bxz|bz|bz2|bza|bzip|bzip2|c00|c01|c02|c10|car|cb7|cba|cbr|cbt|cbz|cc|cdz|ce0|ceo|cfxxe|chm|cih|cla|class|cmd|com|comppkg_hauptwerk_rar|comppkg\.hauptwerk\.rar|cp9|cpgz|cpl|cpt|crt|ctbl|cxarchive|cxq|cyw|czip|dar|dbd|dbx|dd|deb|delf|dev|dgc|dist|dl_|dlb|dli|dll|dllx|docm|dom|drv|dx|dxz|dyv|dyz|dz|ecs|efw|egg|epi|exe|exe1|exe_renamed|ezt|f|fag|fdp|fjl|fnr|fon|fp8|fuj|fzbz|fzpz|gca|gmz|gz|gz2|gza|gzi|gzip|gzquar|ha|hbc|hbc2|hbe|hki|hki1|hki2|hki3|hlp|hlw|hpk|hsq|hta|hts|hyp|iadproj|ice|inf|ins|ipg|ipk|ish|isp|isx|ita|iva|iws|ize|j|jar|jar\.pack|jgz|jic|js|jse|jsonlz4|kcd|kgb|kz|layout|lbr|lemon|let|lha|libzip|lik|lkh|lnk|lnx|lok|lpaq5|lqr|lz|lzh|lzm|lzma|lzo|lzx|md|mdb|mde|mfu|mint|mjg|mjz|mou|mpkg|msc|msi|msp|mst|mzp|nex|nls|nz|oar|ocx|osa|oz|ozd|p01|p19|package|pack\.gz|pae|pak|paq6|paq7|paq8|paq8f|paq8l|paq8p|par|par2|pax|pbi|pcd|pcv|pcx|pea|pet|pf|pgm|php3|pid|pif|pim|pit|piz|pkg|plc|pr|psz|pup|puz|pwa|qda|qit|qrn|r0|r00|r01|r02|r03|r1|r2|r21|r30|rar|reg|rev|rhk|rk|rna|rnc|rp9|rpm|rsc_tmp|rte|rz|s00|s01|s02|s7p|s7z|sar|sbx|scr|sct|sdc|sdn|sea|sen|sfg|sfs|sfx|sh|shar|shb|shk|shr|shs|sifz|sit|sitx|ska|smm|smpf|smtmp|snappy|snb|sop|spam|spt|sqx|srep|ssy|stproj|swf|sy_|sys|tar\.bz2|tar\.gz|tar\.gz2|tar\.lz|tar\.lzma|tar\.xz|tar\.z|taz|tbz|tbz2|tg|tgz|tko|tlz|tlzma|tps|trs|tsa|tti|tx_|txs|txz|tz|uc2|ufs\.uzip|uha|upa|url|uzip|uzy|vb|vba|vbe|vbs|vbx|vem|vexe|vsi|vxd|vzr|wa|waff|war|wlb|wlpginstall|wmf|wot|ws|wsc|wsf|wsh|xar|xdu|xef|xez|xir|xlm|xlv|xmcdz|xnt|xnxx|xtbl|xx|xz|xzm|y|yz|yz1|z|z01|z02|z03|z04|zap|zfsendtotarget|zi|zip|zipx|zix|zl|zoo|zpi|zsplit|zvz|zw|zz)" 
procmail: No match on "^X-Spambayes-Classification: ham" 
procmail: Match on "^X-Spambayes-Classification: (spam|unsure)" 
procmail: Executing "/usr/sbin/sendmail,-oi,spam@localhost" 
sendmail: warning: the Postfix sendmail command has set-uid root file permissions 
sendmail: warning: or the command is run from a set-uid root process 
sendmail: warning: the Postfix sendmail command must be installed without set-uid root file permissions 
procmail: Assigning "LASTFOLDER=/usr/sbin/sendmail -oi spam@localhost" 
procmail: Notified comsat: "testuser@:/usr/sbin/sendmail -oi spam@localhost" 
From david@sardari.eu Mon Jul 25 19:57:52 2016 
Subject: test 
    Folder: /usr/sbin/sendmail -oi spam@localhost    2922 

procmail的主诉其粘着位sendmail命令。但是，这并非如此：

root@mail2:~# ls -l /usr/sbin/sendmail 
-rwxr-xr-x 1 root root 25964 Nov 4 2014 /usr/sbin/sendmail 

如果我把用户的主文件夹的配置文件我没有得到这个错误（〜/ .procmailrc文件）。

问题：

1. 如何摆脱在procmail的日志粘滞位的警告？
2. 如何将代码放在大括号中，例如： | formail -I "X-Dangerous-Attachment: YES" ! spam@localhost？
3. 我是否覆盖了找到附件文件名的所有可能性？在“Content-Type”之后的“Content-Disposition”和“name =”之后，除了“filename =”之外，是否还有另一种可能性被告知附件的文件名？

Answer 1

当它执行/etc/procmailrc时，Procmail正在运行setuid root。 Postfix不喜欢那样。

最简单的解决方案可能是将DROPPRIVS=yes放在某个位置上方的任何传递动作。也许就是这样;

# below the last :0fw filter, of course 
:0cw 
| $DELIVER 

DROPPRIVS=yes 

# any unprivileged actions here 
:0 
! spam@localhost 

因为你似乎落得提供一切spam@localhost我只是拿出了条件。