Date: Sat, 03 May 2003 23:17:36 +0900 From: Hajimu UMEMOTO <ume@mahoroba.org> To: "Scot W. Hetzel" <hetzels@westbend.net> Cc: freebsd-ports@freebsd.org Subject: Re: Cyrus-SASL + sendmail 8.12.9 + "group writable file" Message-ID: <yged6j0dshr.wl%ume@mahoroba.org> In-Reply-To: <005a01c31043$2b360680$13fd2fd8@Admin02> References: <20030428184857.V33294@rigel.orionsys.com> <005a01c31043$2b360680$13fd2fd8@Admin02>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
# I added CC: gshapiro who is the maintainer of sendmail.
>>>>> On Thu, 1 May 2003 19:38:36 -0500
>>>>> "Scot W. Hetzel" <hetzels@westbend.net> said:
hetzels> From: "David Babler" <dbabler@rigel.orionsys.com>
> Basic problem: sendmail errors with permissions/ownerships on
> /usr/local/etc/sasldb
>
> Symptom:
> maillog entry "error: safesasl(/usr/local/etc/sasldb) failed: Group
hetzels> readable file"
>
>
hetzels> We found the problem, the initial sendmail mail submission program was
hetzels> causing these errors to occur when sending mail from the local system. To
Though I'm using SASL2 and not tested SASL1, I cannot see such
problem. I think that MSP doesn't see sasldb2? unless you do enable
SMTP AUTH in submit.mc, and you don't need to have such configuration
by MSP.
hetzels> solve this problem you need to put the following into the submit.mc file
hetzels> that you use on your system (i.e. freebsd.submit.mc):
hetzels> define(`confRUN_AS_USER',`smmsp:mail')dnl
This is odd. The sendmail binary is not setuid to root, anymore. I
believe sendmail as MSP cannot change its user unless invoking from
root.
hetzels> define(`confTRUSTED_USER',`smmsp')dnl
hetzels> define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLDBFile')dnl
hetzels> NOTE: You must define confTRUSTED_USER, otherwise you will get an error in
hetzels> the log (readcf: option TrustedUser: unknown user smmsp:mail). This is
hetzels> caused by FEATURE(msp) defines confTRUSTED_USER using the confRUN_AS_USER
hetzels> value if not defined.
Sincerely,
--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org ume@bisd.hitachi.co.jp ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?yged6j0dshr.wl%ume>