Hi Emannuel,

Just a ping on this issue.

I'd be happy to work on a patch and I intend to (get around to) preparing
an NMU for this issue if you don't act on it.

Thanks,
--Daniel

On Wed, Jul 05, 2023 at 01:10:58PM +0200, Daniel Gröber wrote:
> I've just upgraded my workstation to Bookworm and the upgrade broke my
> (outgoing) mail setup where I'm using msmtp due to permission errors
> involving files owned by msmtp:msmtp. I see from your NEWS entry that
> SetGID support was removed because it conflicts with passwords
> retrieved through libsecret.
> 
> Problem is in my deployment I'm not using passwords but rather TLS
> client certificates, which AFAICT the libsecret integration simply
> does not support so I cannot migrate my config to the non-setgid
> msmtp.
> 
> I'd like to request a new package, say msmtp-sysconfig, that will make
> /usr/bin/msmtp setgid again on installation. I'd be happy to provide a
> patch if you agree this is a reasonable idea.
> 
> Thanks,
> --Daniel
> 
> -- System Information:
> Debian Release: 12.0
>   APT prefers stable
>   APT policy: (990, 'stable'), (500, 'stable-security'), (500, 
> 'stable-debug'), (500, 'proposed-updates-debug')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 6.1.0-9-amd64 (SMP w/16 CPU threads; PREEMPT)
> Kernel taint flags: TAINT_WARN
> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
> 
> Versions of packages msmtp depends on:
> ii  adduser                3.134
> ii  debconf [debconf-2.0]  1.5.82
> ii  libc6                  2.36-9
> ii  libgnutls30            3.7.9-2
> ii  libgsasl18             2.2.0-1
> ii  libsecret-1-0          0.20.5-3
> ii  ucf                    3.0043+nmu1
> 
> Versions of packages msmtp recommends:
> ii  ca-certificates  20230311
> 
> Versions of packages msmtp suggests:
> ii  msmtp-mta  1.8.23-1
> 
> -- debconf information excluded

Attachment: signature.asc
Description: PGP signature

Reply via email to