CVE-2020-28012: Missing close-on-exec flag for privileged pipe

[exim.git] / test / confs / 4520

# Exim test configuration 4520

SERVER=
OPT=
FAKE =

.include DIR/aux-var/std_conf_prefix

primary_hostname = myhost.test.ex

# ----- Main settings -----

acl_smtp_rcpt = accept logwrite = rcpt_acl: macro: _DKIM_SIGN_HEADERS
acl_smtp_dkim = accept logwrite = dkim_acl: signer: $dkim_cur_signer bits: $dkim_key_length h=$dkim_headernames
acl_smtp_data = accept logwrite = data_acl: dkim status $dkim_verify_status

dkim_verify_signers = $dkim_signers
dkim_verify_min_keysizes = rsa=512 ed25519=250
.ifdef FILTER
dkim_verify_minimal = true
.endif

DDIR=DIR/aux-fixed/dkim

log_selector = -dkim +dkim_verbose +received_recipients

# ----- Routers

begin routers

server_store:
  driver =      accept
  condition =   ${if eq {SERVER}{server}{yes}{no}}
  transport =   file

client:
  driver =      accept
  transport =   send_to_server

# ----- Transports

begin transports

send_to_server:
  driver = smtp
  allow_localhost
  hosts = HOSTIPV4
  port = PORT_D
  hosts_try_fastopen =  :

  dkim_domain =         test.ex
.ifdef SELECTOR
  dkim_selector =       SELECTOR
.else
  dkim_selector =       sel
.endif

  dkim_private_key =    ${extract {${length_3:$dkim_selector}} {\
                                ses=dkim512.private \
                                sel=dkim.private \
                                sed=dkim_ed25519.private \
                                }{DDIR/$value}}

.ifndef HEADERS_MAXSIZE
  dkim_sign_headers =   OPT
.else
  dkim_identity =       allheaders@$dkim_domain
.endif
.ifdef VALUE
  dkim_hash =           VALUE
.endif
.ifdef STRICT
  dkim_strict =         STRICT
.endif
.ifdef TIMES
  dkim_timestamps =     TIMES
.endif

file:
  driver =      appendfile
  file =        DIR/test-mail/${bless:$local_part}
  user =        CALLER

# End