How to use "keep_environment" option in exim 4 on Debian

Question

I am running exim 4.84_2 on Debian, now since a few weeks I get the following mails from anacron:

/etc/cron.daily/exim4-base:
LOG: MAIN
  Warning: purging the environment.
 Suggested action: use keep_environment.

I have added the following line to /etc/exim4/exim4.conf.template:

keep_environment =

But when running update-exim4.conf I get the following error:

2016-05-17 00:20:00 Exim configuration error in line 900 of /var/lib/exim4/config.autogenerated.tmp:
  option "keep_environment" unknown

Any ideas?

Solution

On Debian you can set the macro

MAIN_KEEP_ENVIRONMENT =

in /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs or where ever you set your macros. See: /usr/share/doc/exim4/changelog.Debian.gz

Comments

[Kondybas]

Keep the environment purged, that is a security fix. Further reading can be found here exim.org/static/doc/CVE-2016-1531.txt

[Harkály Gergő]

I activated a new server with VestaCP, but we got this error too (I have made some VPS+Vesta, but it's the first occurence with this error). I should just past this code into 01... file without any value after = sign? Thank you!

[Adrian Zaugg]

Yes, without anything.

[jdhildeb]

If you are not using a split-file configuration, you can add set this macro at the top of /etc/exim4/exim4.conf.template

[x-yuri]

It's generally better to add such things to /etc/exim4/exim4.conf.localmacros. Works for split and non-split configs.

[x-yuri]

And if you're running Jessie, MAIN_KEEP_ENVIRONMENT won't help. It was added later. In case of Debian Stretch, you don't have to do anything. Save probably update exim.