From owner-freebsd-questions Tue Jan 28 19:13:55 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DB86837B401 for ; Tue, 28 Jan 2003 19:13:53 -0800 (PST) Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id BEEC943F3F for ; Tue, 28 Jan 2003 19:13:52 -0800 (PST) (envelope-from keramida@ceid.upatras.gr) Received: from gothmog.gr (patr530-b235.otenet.gr [212.205.244.243]) by mailsrv.otenet.gr (8.12.6/8.12.6) with ESMTP id h0T3DYRR004846; Wed, 29 Jan 2003 05:13:44 +0200 (EET) Received: from gothmog.gr (gothmog [127.0.0.1]) by gothmog.gr (8.12.6/8.12.6) with ESMTP id h0T3DU7k017745; Wed, 29 Jan 2003 05:13:30 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Received: (from giorgos@localhost) by gothmog.gr (8.12.6/8.12.6/Submit) id h0T3DI9p017638; Wed, 29 Jan 2003 05:13:18 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Date: Wed, 29 Jan 2003 05:13:18 +0200 From: Giorgos Keramidas To: Michael Grant Cc: freebsd-questions@FreeBSD.org Subject: Re: setuid sendmail Message-ID: <20030129031318.GD660@gothmog.gr> References: <200301281950.h0SJoF805949@splat.grant.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200301281950.h0SJoF805949@splat.grant.org> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 2003-01-28 20:50, Michael Grant wrote: > It seems that sendmail is no longer setuid root. (I have 4.7 on one > box where it's not setuid and 4.2 stable on another box where it is). You should really read the instructions in /usr/src/UPDATING at the 4.7 installation. Especially the entry that starts with: : 20020404: : Due to the import of sendmail 8.12.2 (see 20020325 entry), a new : user and group are required in order for sendmail to run as a : set-group-ID binary. A 'make installworld' will use the new user : and group [...] > When I run mailq from my 4.7 box, I get a permission denied error > when run as a normal user. Is this now the expected behavior? Is > there any relatively secure way to make mailq work again from a > non-root user? This is a problem with the permissions of the mail queues. Do what UPDATING says and you still fix things. It works fine after you set everything up: $ id uid=1001(giorgos) gid=1001(giorgos) groups=1001(giorgos), 21(ftp) $ mailq -Ac /var/spool/clientmqueue is empty Total requests: 0 $ mailq /var/spool/mqueue is empty Total requests: 0 $ - Giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message