I have tried by having the alias directly call the email2trac script, but receive similar security notifications.
Copied below are two major possiblities.  The alias for trac directly calls email2trac in both cases.  In the first, root owns the email2trac script, in the second instance the email2trac script was chowned to apache user.

Nov  5 10:09:31 cnsetrac email2trac: Traceback (most recent call last):
Nov  5 10:09:31 cnsetrac email2trac:   File "/usr/local/bin/email2trac", line 1060, in ?     env = Environment(settings['project'], create=0)
Nov  5 10:09:31 cnsetrac email2trac:   File "/usr/lib/python2.4/site-packages/trac/env.py", line 147, in __init__     self.verify()
Nov  5 10:09:31 cnsetrac email2trac:   File "/usr/lib/python2.4/site-packages/trac/env.py", line 195, in verify     fd = open( os.path.join(self.path, 'VERSION'), 'r')
Nov  5 10:09:31 cnsetrac email2trac: IOError: [Errno 13] Permission denied: '/var/www/trac/CNSEHelp/VERSION'

Nov  5 10:10:49 cnsetrac email2trac: Traceback (most recent call last):
Nov  5 10:10:49 cnsetrac email2trac:   File "/usr/local/bin/email2trac", line 1060, in ?     env = Environment(settings['project'], create=0)
Nov  5 10:10:49 cnsetrac email2trac:   File "/usr/lib/python2.4/site-packages/trac/env.py", line 147, in __init__     self.verify()
Nov  5 10:10:49 cnsetrac email2trac:   File "/usr/lib/python2.4/site-packages/trac/env.py", line 195, in verify     fd = open(os.path.join(self.path, 'VERSION'), 'r')
Nov  5 10:10:49 cnsetrac email2trac: IOError: [Errno 13] Permission denied: '/var/www/trac/CNSEHelp/VERSION'


On 11/3/07, email2trac < email2trac@sara.nl> wrote:
#32: permissions issue, email2trac config
-----------------------------+----------------------------------------------
Reporter:  acgoss@gmail.com  |        Owner:  bas
    Type:  defect            |       Status:  assigned
Priority:  major             |    Component:  email2trac
Version:   0.10              |   Resolution:
Keywords:                    |
-----------------------------+----------------------------------------------
Comment (by bas):

and run_email2trac is setuid root. If yes can you run run_email2trac in
debug mode as the postfix user:

run_email2trac --project=<name> < msg.txt

There must be something wrong in switching from the postfix user to the
apache user. There is also another setup for postfix without the need for
run_email2trac did you tried that one?

--
Ticket URL: <https://subtrac.rc.sara.nl/oss/email2trac/ticket/32#comment:5 >
email2trac < https://subtrac.sara.nl/oss/email2trac>
Documentation server for email2trac