From owner-freebsd-security Sun Nov 15 14:10:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA08518 for freebsd-security-outgoing; Sun, 15 Nov 1998 14:10:08 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from zippy.cdrom.com (zippy.cdrom.com [204.216.27.228]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA08509 for ; Sun, 15 Nov 1998 14:10:06 -0800 (PST) (envelope-from jkh@zippy.cdrom.com) Received: from zippy.cdrom.com (localhost.cdrom.com [127.0.0.1]) by zippy.cdrom.com (8.9.1a/8.9.1) with ESMTP id OAA21242 for ; Sun, 15 Nov 1998 14:10:35 -0800 (PST) To: security@FreeBSD.ORG Subject: "Todd C. Miller": sendmail changes in OpenBSD 2.4 Date: Sun, 15 Nov 1998 14:10:34 -0800 Message-ID: <21235.911167834@zippy.cdrom.com> From: "Jordan K. Hubbard" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hmmm. This sounds like a rather large user hit to take, but one less suid root executable (and an end to the other problems described below) also has strong appeal. Comments? - Jordan ------- Forwarded Message To: announce@openbsd.org Subject: sendmail changes in OpenBSD 2.4 Date: Sun, 15 Nov 1998 14:49:25 -0700 From: "Todd C. Miller" Sender: owner-announce@openbsd.org In 2.4, /usr/libexec/mail.local is no longer setuid, to prevent its abuse by users (trivial mail forgery, filling up /var/mail, etc). If you are upgrading from a previous version of OpenBSD you will need to either regenerate your sendmail.cf with an OSTYPE of "openbsd" instead of "bsd4.4" or edit the sendmail.cf directly and in the line that begins with Mlocal, change the "rmn9" to "rmn9S". If you use an old sendmail.cf with the 2.4 mail.local you will lose mail. - todd ------- End of Forwarded Message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message