Bug #78916 [Com]: php-fpm 7.4.0 don't send mail via mail()

Edit report at https://bugs.php.net/bug.php?id=78916&edit=1 ID: 78916 Comment by: ilya at ilya dot pp dot ua Reported by: ilya at ilya dot pp dot ua Summary: php-fpm 7.4.0 don't send mail via mail() Status: Open Type: Bug Package: *Configuration Issues Operating System: systemd/linux PHP Version: 7.4.0 Block user comment: N Private report: N New Comment: After -RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictAddressFamilies=AF_INET AF_INET6 AF_LOCAL AF_UNIX AF_NETLINK Error in postfix log: fatal: mail_queue_enter: create file maildrop/508120.1166: no permission warning: command "/usr/sbin/postdrop -r" exited with status 1 fatal: info@gricargo.com(467): unable to execute /usr/sbin/postdrop -r: Success nginx log is empty. What else needs to be changed in this systemd file? Previous Comments: ------------------------------------------------------------------------ [2019-12-05 16:12:28] ilya at ilya dot pp dot ua > Since the error is logged by postfix I don't think this is caused by php-fpm, who provides > /usr/bin/sendmail on this machine? php-fpm 3.7.11 work fine #!/usr/bin/env sh echo -e 'Subject:'date +'%H:%M %d.%m.%Y''\nTest from Ilya to Google' | /usr/sbin/sendmail my_gmail_name@gmail.com Work fine! LC_ALL=en sudo cnf sendmail Program 'sendmail' is present in package 'postfix', which is installed on your system. Absolute path to 'sendmail' is '/usr/sbin/sendmail', so running it may require superuser privileges (eg. root). postfix 3.4.8 ------------------------------------------------------------------------ [2019-12-05 16:05:18] ilya at ilya dot pp dot ua <?php $to_mail = 'user@user.server.com'; $from_mail = 'you@your.server.com'; $from = 'You <'.$from_mail.'>'; $headers = [ 'MIME-Version' => '1.0', 'Content-Type' => 'text/html; charset=UTF-8', 'Content-Transfer-Encoding' => 'binary', 'From' => $from, 'Reply-To' => $from, ]; mail($to_mail, 'Test message', <p>Test message.</p>, $headers, '-f'.$from_mail); ?> ------------------------------------------------------------------------ [2019-12-05 16:05:13] ilya at ilya dot pp dot ua <?php $to_mail = 'user@user.server.com'; $from_mail = 'you@your.server.com'; $from = 'You <'.$from_mail.'>'; $headers = [ 'MIME-Version' => '1.0', 'Content-Type' => 'text/html; charset=UTF-8', 'Content-Transfer-Encoding' => 'binary', 'From' => $from, 'Reply-To' => $from, ]; mail($to_mail, 'Test message', <p>Test message.</p>, $headers, '-f'.$from_mail); ?> ------------------------------------------------------------------------ [2019-12-05 14:58:52] retertertert at fgfgfg dot com > To properly diagnose the problem, we need a short > but complete example script to be able to reproduce > this bug ourselves this is sonsense obviously the namespace/capabilities options used in the systemd unit are killing the communiction of the postfix processes runnin on hebalv the server, that's how sendmail prcoess works, it opens other postfix related processes which need capabilities this sounds more than RestrictAddressFamilies is also used now and "AF_UNIX AF_NETLINK" is missing, without a spamass-milter can't send BCC mails too RestrictAddressFamilies=AF_INET AF_INET6 AF_LOCAL AF_UNIX AF_NETLINK ------------------------------------------------------------------------ [2019-12-05 14:37:21] sjon@php.net Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with <?php and ends with ?>, is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. I run php-fpm using the same version and CapabilityBoundingSet and mail works fine - so we need more details. Since the error is logged by postfix I don't think this is caused by php-fpm, who provides /usr/bin/sendmail on this machine? ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=78916 -- Edit this bug report at https://bugs.php.net/bug.php?id=78916&edit=1