* Fri Jan 03 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-5.sme

- set more relaxed CSP for roundcube [SME: 12861]

.gitignore

@@ -1,3 +1,4 @@
 *.rpm
 *.log
-*spec-20*
+*spec-20**.bak
+*gz

README.md

@@ -6,7 +6,14 @@ SMEServer Koozali developed git repo for smeserver-roundcube core
 <br />https://wiki.koozali.org/smeserver-roundcube
 
 ## Bugzilla
-Show list of outstanding bugs: [here](https://bugs.koozali.org/buglist.cgi?component=smeserver-roundcube&product=SME%20Server%2011.X&query_format=advanced&limit=0&bug_status=UNCONFIRMED&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&bug_status=CONFIRMED)
+Show list of outstanding bugs:
+[All](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=UNCONFIRMED&bug_status=CONFIRMED&bug_status=NEEDINFO&bug_status=IN_PROGRESS&bug_status=RESOLVED&bug_status=VERIFIED&cf_package=smeserver-roundcube&classification=SME+Server&list_id=105756&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[Confirmed](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=CONFIRMED&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[Unconfirmed](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=UNCONFIRMED&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[Need info](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=NEEDINFO&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[In progress](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=IN_PROGRESS&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[Resolved](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=RESOLVED&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)  
+[Verified](https://bugs.koozali.org/buglist.cgi?action=wrap&bug_status=VERIFIED&cf_package=smeserver-roundcube&classification=SME+Server&order=changeddate+DESC%2Ccomponent%2Cpriority%2Cbug_severity&query_format=advanced)
 
 ## Description
 

createlinks

@@ -33,6 +33,8 @@ for my $event (qw(
     conf-roundcube
     roundcube-update
     console-save
+    post-install
+    post-upgrade
     ))
 {
     templates2events("/usr/share/roundcubemail/plugins/managesieve/config.inc.php", $event);
@@ -47,6 +49,8 @@ for  my $event (qw(
     smeserver-roundcube-update
     conf-roundcube
     roundcube-update
+    post-install
+    post-upgrade
     ))
 {
     templates2events("/etc/opt/remi/php81/php-fpm.d/www.conf",$event);
@@ -65,6 +69,8 @@ foreach my $event (qw(
     smeserver-roundcube-update
     conf-roundcube
     roundcube-update
+    post-install
+    post-upgrade
    ))
 {
     event_link("qmail-update-user", $event, "20");

root/etc/dnf/plugins/post-transaction-actions.d/roundcubemail.action

@@ -0,0 +1 @@
+roundcubemail:any:/sbin/e-smith/signal-event smeserver-roundcube

root/etc/e-smith/events/actions/roundcube-conf

@@ -3,12 +3,16 @@
 /usr/bin/sed -i -e 's/^.*error_reporting.*$/    \/\/rem/'  /usr/share/roundcubemail/program/lib/Roundcube/bootstrap.php
 # update composer
 
+# if installed before user apache becoem an alias of www 102
+/bin/rpm --setugids roundcubemail 
+/bin/rpm --setperms roundcubemail 
+
 # disabled by default for SME11 as we would rather the stability of rpms
 #/usr/bin/rcplugin_update.sh
 
 # prevent bug with spell checker: An error was encountered on the server. Please try again later.
-pushd /usr/share/myspell
+pushd /usr/share/myspell >/dev/null
 [ -f en.dic ] || ln -s en_US.dic en.dic
 [ -f en.aff ] || ln -s en_US.aff en.aff
-popd
+popd >/dev/null
 

root/etc/e-smith/templates/etc/httpd/conf/httpd.conf/VirtualHosts/30RoundcubeWebmailAliases

@@ -23,6 +23,12 @@
         } else {
             $OUT .= "    Alias       /$place   $dirs{$place}\n";
         }
+
+        $OUT .= "    <Location '/$place'>\n";
+        # strict CSP not yet supported see https://github.com/roundcube/roundcubemail/issues/6202 and few others
+        $OUT .= "       Header set Content-Security-Policy \"default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self'; frame-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self';\"\n";
+        $OUT .= "    </Location>\n";
+
     }
 }
 

root/etc/e-smith/templates/etc/php-fpm.d/www.conf/15roundcube

@@ -10,7 +10,7 @@ if ($PHP_VERSION eq $phpversion){
     my $open_basedir= $roundcube{PHPBaseDir} || '';
     my $include_path = ".:/usr/share/pear-addons:/usr/share/pear:/usr/share/pear-data/:/usr/share/php".
        ":/opt/remi/php81/root/usr/share/pear:/opt/remi/php81/root/usr/share/php".
-       ":/opt/remi/php81/root/usr/share/pear-data/:/opt/remi/php82/root/usr/share/pear-data/: /opt/remi/php83/root/usr/share/pear-data/";
+       ":/opt/remi/php81/root/usr/share/pear-data/:/opt/remi/php82/root/usr/share/pear-data/:/opt/remi/php83/root/usr/share/pear-data/";
     $open_basedir = "/usr/share/roundcubemail:/etc/roundcubemail/:/var/log/roundcubemail:/var/lib/roundcubemail:/var/log/roundcube.log:/var/lib/php/roundcube:/home/e-smith/files/roundcube:/dev/urandom:/proc/meminfo:/usr/share/GeoIP/GeoLite2-Country.mmdb:/proc/cpuinfo:$open_basedir:$include_path";
     my $id = 'roundcube';
     my $max_children = $roundcube{'PHPmaxChildren'} || 20;

smeserver-roundcube.spec

@@ -1,6 +1,6 @@
 %define name smeserver-roundcube
 %define version 1.6
-%define release 3
+%define release 5
 
 Summary: smserver rpm to setup roundcube, an IMAP mail client
 Name: %{name}
@@ -16,6 +16,7 @@ BuildArchitectures: noarch
 BuildRequires: smeserver-devtools
 Requires: smeserver-release >= 11.0
 Requires: smeserver-apache >= 11.0
+Requires: smeserver-php
 Requires: roundcubemail >= 1.6 
 Requires: roundcubemail < 1.7
 Requires: composer >= 2.7.8
@@ -38,6 +39,7 @@ Requires: roundcube-plugin-contextmenu
 Requires: php-sabre-dav php-sabre-event php-sabre-http php-sabre-uri2 php-sabre-vobject4 php-sabre-xml2
 Requires: php81-php-pspell php82-php-pspell php83-php-pspell
 Requires: enchant php81-php-enchant php82-php-enchant php83-php-enchant
+Requires: php81-php-xml php82-php-xml php83-php-xml
 Requires: hunspell-en hunspell-en-GB
 AutoReqProv: no
  
@@ -83,6 +85,12 @@ fi
 %attr(755,root,root) /usr/bin/rcplugin_update.sh
 
 %changelog
+* Fri Jan 03 2025 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-5.sme
+- set more relaxed CSP for roundcube [SME: 12861]
+
+* Sat Dec 14 2024 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-4.sme
+- fix roundcube not working on initial install [SME: 12812]
+
 * Sun Sep 01 2024 Jean-Philippe Pialasse <jpp@koozali.org> 1.6-3.sme
 - initial version for SME11 [SME: 12617]
 - build and require rpm for plugins and skins