From owner-freebsd-security  Fri Nov 20 18:01:20 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id SAA22777
          for freebsd-security-outgoing; Fri, 20 Nov 1998 18:01:20 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from gatekeeper.tsc.tdk.com (gatekeeper.tsc.tdk.com [207.113.159.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA22772
          for <security@FreeBSD.ORG>; Fri, 20 Nov 1998 18:01:16 -0800 (PST)
          (envelope-from gdonl@tsc.tdk.com)
Received: from sunrise.gv.tsc.tdk.com (root@sunrise.gv.tsc.tdk.com [192.168.241.191])
	by gatekeeper.tsc.tdk.com (8.8.8/8.8.8) with ESMTP id SAA13956;
	Fri, 20 Nov 1998 18:00:34 -0800 (PST)
	(envelope-from gdonl@tsc.tdk.com)
Received: from salsa.gv.tsc.tdk.com (salsa.gv.tsc.tdk.com [192.168.241.194])
	by sunrise.gv.tsc.tdk.com (8.8.5/8.8.5) with ESMTP id SAA03012;
	Fri, 20 Nov 1998 18:00:32 -0800 (PST)
Received: (from gdonl@localhost)
	by salsa.gv.tsc.tdk.com (8.8.5/8.8.5) id SAA28322;
	Fri, 20 Nov 1998 18:00:29 -0800 (PST)
From: Don Lewis <Don.Lewis@tsc.tdk.com>
Message-Id: <199811210200.SAA28322@salsa.gv.tsc.tdk.com>
Date: Fri, 20 Nov 1998 18:00:29 -0800
In-Reply-To: "Jordan K. Hubbard" <jkh@zippy.cdrom.com>
       ""Todd C. Miller": sendmail changes in OpenBSD 2.4" (Nov 15,  2:10pm)
X-Mailer: Mail User's Shell (7.2.6 alpha(3) 7/19/95)
To: "Jordan K. Hubbard" <jkh@zippy.cdrom.com>, security@FreeBSD.ORG
Subject: Re: "Todd C. Miller": sendmail changes in OpenBSD 2.4
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

} To: announce@openbsd.org
} Subject: sendmail changes in OpenBSD 2.4
} Date: Sun, 15 Nov 1998 14:49:25 -0700
} From: "Todd C. Miller" <Todd.Miller@courtesan.com>
} Sender: owner-announce@openbsd.org
} 
} In 2.4, /usr/libexec/mail.local is no longer setuid, to prevent its
} abuse by users (trivial mail forgery, filling up /var/mail, etc).
} 
} If you are upgrading from a previous version of OpenBSD you will
} need to either regenerate your sendmail.cf with an OSTYPE of "openbsd"
} instead of "bsd4.4" or edit the sendmail.cf directly and in the
} line that begins with Mlocal, change the "rmn9" to "rmn9S".

This is not compatible with the RunAsUser sendmail option, which provides
some protection against sendmail exploits.

			---  Truck

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message