From owner-freebsd-stable  Wed Nov 21  9:37:30 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP id D85BB37B417
	for <freebsd-stable@FreeBSD.ORG>; Wed, 21 Nov 2001 09:37:25 -0800 (PST)
Received: from horsey.gshapiro.net (gshapiro@localhost [IPv6:::1])
	by horsey.gshapiro.net (8.12.2.Beta1/8.12.2.Beta1) with ESMTP id fALHbPBQ064669
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Wed, 21 Nov 2001 09:37:25 -0800 (PST)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.2.Beta1/8.12.2.Beta1/Submit) id fALHbO3h064666;
	Wed, 21 Nov 2001 09:37:24 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15355.58964.269857.710670@horsey.gshapiro.net>
Date: Wed, 21 Nov 2001 09:37:24 -0800
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: "Kutulu" <kutulu@kutulu.org>
Cc: "freebsd-stable@freebsd.org" <freebsd-stable@FreeBSD.ORG>
Subject: Re: sendmail (and other MTAs) as non-root user...
In-Reply-To: <020401c16fbe$47e03570$88682518@longhill1.md.home.com>
References: <020401c16fbe$47e03570$88682518@longhill1.md.home.com>
X-Mailer: VM 6.96 under 21.5  (beta3) "asparagus" XEmacs Lucid
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

kutulu> I recently saw commits to -CURRENT to add standard users for
kutulu> sendmail (or other MTAs) to run as in place of root.

These users do not make sendmail run as a non-root user.  If you double
check the commit message, you'll see that they only affect certain
operations.

kutulu> What do I need to change to my existing -STABLE setup to
kutulu> incorporate sendmail running as non-root?

Take a look at the sendmail documentation for the RunAsUser option.

kutulu> And what users/groups should I add to keep my system in line with
kutulu> the new standard users?  (Of course, if this change is going to be
kutulu> MFC'd then I'll just wait for that.)

It will be MFC'ed in the next few days.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message