From owner-freebsd-security@FreeBSD.ORG  Tue Apr  1 01:07:09 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A2C5637B401
	for <freebsd-security@freebsd.org>;
	Tue,  1 Apr 2003 01:07:09 -0800 (PST)
Received: from tyrex.indenial.com (h00036d1cf43b.ne.client2.attbi.com
	[24.128.149.99])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2480543F75
	for <freebsd-security@freebsd.org>;
	Tue,  1 Apr 2003 01:07:06 -0800 (PST)
	(envelope-from 1nd3n14l@indenial.com)
Received: from godzilla.indenial.com (godzilla.indenial.com [10.0.2.111])
	by tyrex.indenial.com (8.12.9/8.12.9) with ESMTP id h31975t0064540
	for <freebsd-security@freebsd.org>;
	Tue, 1 Apr 2003 04:07:05 -0500 (EST)
	(envelope-from 1nd3n14l@indenial.com)
Received: from godzilla.indenial.com (localhost [127.0.0.1])
	by godzilla.indenial.com (8.12.9/8.12.9) with ESMTP id h31975BH097096
	for <freebsd-security@freebsd.org>;
	Tue, 1 Apr 2003 04:07:05 -0500 (EST)
	(envelope-from 1nd3n14l@indenial.com)
Received: from localhost (1nd3n14l@localhost)h31974cG097093
	for <freebsd-security@freebsd.org>;
	Tue, 1 Apr 2003 04:07:05 -0500 (EST)
X-Authentication-Warning: godzilla.indenial.com: 1nd3n14l owned process doing
	-bs
Date: Tue, 1 Apr 2003 04:07:04 -0500 (EST)
From: David A Bestor <1nd3n14l@indenial.com>
To: freebsd-security@freebsd.org
In-Reply-To: <200303302121.h2ULL47f023145@freefall.freebsd.org>
Message-ID: <20030401034814.X97058@godzilla.indenial.com>
References: <200303302121.h2ULL47f023145@freefall.freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:07.sendmail
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2003 09:07:09 -0000

On Sun, 30 Mar 2003, FreeBSD Security Advisories wrote:

> =============================================================================
> FreeBSD-SA-03:07.sendmail                                   Security Advisory
>                                                           The FreeBSD Project
>
> b) Execute the following commands as root:
>
> # cd /usr/src
> # patch < /path/to/patch
> # cd /usr/src/lib/libsm
> # make obj && make depend && make
> # cd /usr/src/lib/libsmutil
> # make obj && make depend && make
> # cd /usr/src/usr.sbin/sendmail
> # make obj && make depend && make && make install
>
I think the advisory should also include the following:
# cd /usr/src/share/sendmail
# make install

I run a custom hostname.mc in /etc/mail . Which I dont think is to
extreme. If I do the following:
cd /etc/mail
make

I then compare hostname.cf to sendmail.cf and it does not get
built with updated information. This is because I still have the
old m4 files in /usr/share/sendmail/cf unless I do the additional make
install from above.

Thanks,
David