[exim] Add plugin for the Exim mail transfer agent - #4422
Open
suraj-cmd wants to merge 1 commit into
Open
Conversation
sos has plugins for postfix, sendmail and dovecot, but nothing for exim, and no other plugin references it. Exim is the default MTA on Debian and Ubuntu and is also packaged for Fedora and EPEL, so an sosreport from one of those hosts currently contains no mail configuration, queue state or logs. The layout differs enough between distributions to need subclasses: Red Hat ships a single /etc/exim/exim.conf with logs named main.log, reject.log and panic.log under /var/log/exim, while Debian uses the split configuration under /etc/exim4 with mainlog, rejectlog and paniclog under /var/log/exim4, and the exim4 unit name. Common to both, the plugin runs "exim -bV" for the build and configuration summary and "exim -bp" for the queue. The passwd and passwd.client maps hold SMTP authentication credentials in cleartext, including those used to relay through a smarthost. Both are added to the forbidden paths in each subclass so they cannot be collected under any option combination. Signed-off-by: Suraj Patil <surajpatil522@gmail.com>
|
Congratulations! One of the builds has completed. 🍾 You can install the built RPMs by following these steps:
Please note that the RPMs should be used only in a testing environment. |
Member
|
again, please test the plugin before hand, we want to ensure that no secrets are coming out of config files or anything like that |
Member
|
Unfortunately I can't meaningfully test this as I haven't touched |
pmoravec
reviewed
Aug 14, 2026
| '/etc/exim/passwd.client', | ||
| ]) | ||
|
|
||
| self.add_copy_spec('/etc/exim') |
Contributor
There was a problem hiding this comment.
Can't be there (or in equivalent Debian file) some secret to obfuscate?
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
sos has plugins for postfix, sendmail and dovecot, but nothing for exim, and no
other plugin references it. Exim is the default MTA on Debian and Ubuntu and is
also packaged for Fedora and EPEL, so an sosreport from one of those hosts
currently contains no mail configuration, queue state or logs.
The layout differs enough between distributions to need subclasses: Red Hat
ships a single
/etc/exim/exim.confwith logs namedmain.log,reject.logand
panic.logunder/var/log/exim, while Debian uses the splitconfiguration under
/etc/exim4withmainlog,rejectlogandpaniclogunder
/var/log/exim4, and theexim4unit name.Common to both, the plugin runs
exim -bVfor the build and configurationsummary and
exim -bpfor the queue.The
passwdandpasswd.clientmaps hold SMTP authentication credentials incleartext, including those used to relay through a smarthost. Both are added to
the forbidden paths in each subclass so they cannot be collected under any
option combination.
I do not have an exim deployment to test against. The Debian log filenames and
the
exim4unit name are taken from the packaging rather than a live system,so confirmation would be welcome.
Please place an 'X' inside each '[]' to confirm you adhere to our Contributor Guidelines