Add "aliases_wrapper" configuration parameter

[racke]

This allows you to invoke the command from "sendmail_aliases" without using the wrapper. This should fix #946 and should work for Exim and Postfix MTA in most cases.

Current default is to use the alias wrapper, but in the future we may change that default.

[ikedas]

There no longer are nothing to review for me.

[Beuc]

Hi, what is the status of this pull request?
Minor precision for clarity, I believe the command referenced in OP is 'aliases_program', or 'sympa_newaliases.pl' (not 'sendmail_aliases').

[racke]

Hi, what is the status of this pull request?

It is supposed to be ready for the next release.

Minor precision for clarity, I believe the command referenced in OP is 'aliases_program', or 'sympa_newaliases.pl' (not 'sendmail_aliases').

Sorry I miss the clarity in your comment, please elaborate.

[Beuc]

Minor precision for clarity, I believe the command referenced in OP is 'aliases_program', or 'sympa_newaliases.pl' (not 'sendmail_aliases').

Sorry I miss the clarity in your comment, please elaborate.

Certainly. You wrote in the OP:

This allows you to invoke the command from "sendmail_aliases" without using the wrapper. This should fix #946 and should work for Exim and Postfix MTA in most cases.

'sendmail_aliases' (default '/etc/mail/sympa/aliases') is the target file and not a command.
I think you meant 'aliases_program', or 'sympa_newaliases.pl'.

Since this issue is referenced in the discussion about CVE-2020-26880, let's also note that this PR doesn't address that vulnerability, unless the 'sympa_newaliases-wrapper' file is also deleted.

[mhow2]

@ikedas : it seems Sylvain is waiting for an answer at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972114

This fix is still pending in debian, as far as I understand. (still 1 ignored security issue at https://tracker.debian.org/pkg/sympa)

[Beuc]

@mhow2 this issue is pretty much independent from CVE-2020-26880, see #1009 instead.
Also I added a comment at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972114#29 to clarify.

[racke]

Yes, in my opinion no part of Sympa should be run as another user. This would fix root escalation issues and it is feasible as far I can tell. But we need more documentation about configuring Sympa which each MTA and webserver to reach this goal.