[apparmor] Enabling email delivery for wordpress

Robert Munteanu robert.munteanu at gmail.com
Wed Nov 2 20:08:50 UTC 2016


Hi,

I am trying to secure my wordpress installation using apparmor. The
basic permissions are nothing special, until we get to email delivery.

Wordpress by default always wants to use the php mail() function,
which in turn always wants to use a binary. So I can't fix this by
enabling email delivery via SMTP.

So I ended up adding the following to my profile:

    /bin/bash                        ixr,
    /usr/sbin/sendmail               Uxr,

That strikes me as being a pretty wide net, so I'm curious if there's
something that I can do better.

Thanks,

Robert

-- 
http://robert.muntea.nu/



More information about the AppArmor mailing list