From 80ff16b21c7081165d346ff94b450f432a82ee47 Mon Sep 17 00:00:00 2001
From: shtrophic
Date: Tue, 19 Nov 2024 21:45:21 +0100
Subject: make sendmail executable if configured

---
 sandbox.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'sandbox.c')

diff --git a/sandbox.c b/sandbox.c
index c45587a..7f26d0a 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -26,9 +26,9 @@ void sbox_enter(const char *basedir)
 
     const char *address = xs_dict_get(srv_config, "address");
 
-#if defined (__OpenBSD__)
     int smail = !xs_is_true(xs_dict_get(srv_config, "disable_email_notifications"));
 
+#if defined (__OpenBSD__)
     srv_debug(1, xs_fmt("Calling unveil()"));
     unveil(basedir,                "rwc");
     unveil("/tmp",                 "rwc");
@@ -161,6 +161,9 @@ void sbox_enter(const char *basedir)
     if (*address == '/')
         LANDLOCK_PATH(address, LL_UNIX);
 
+    if (smail)
+        LANDLOCK_PATH("/usr/sbin/sendmail", LL_X);
+
     if (abi > 3) {
         if (*address != '/') {
             LANDLOCK_PORT(
-- 
cgit v1.2.3