Date: Wed, 08 Jul 1998 01:18:15 +0100 From: Manar Hussain <manar@ivision.co.uk> To: Paulo Fragoso <paulo@nlink.com.br> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Majordomo Message-ID: <3.0.5.32.19980708011815.008c2820@stingray.ivision.co.uk> In-Reply-To: <Pine.BSF.3.96.980707111730.4946B-100000@mirage.nlink.com.b r> References: <3.0.5.32.19980706230046.007fb420@stingray.ivision.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
>Yes, I would like to learn how to make majordomo (wrapper) without suid.
>Can you help me?
As I said we use Exim. We find it an excellently documented alternative to
sendmail that's better in most other respects we can think of whilst still
looking like sendmail enough that other programs can't tell the difference
(We install Exim "as" sendmail).
You can get details on it (including where to get it) at www.exim.org
Here is what we might put in the exim config file that (a) define a new
aliases file for majordomo aliases and (b) states that delivery for these
aliases should be as the user "majordom
majordomo_aliases:
driver = aliasfile
file = /etc/majordomo_aliases
search_type = lsearch
user = majordom
group = mail
So put the <listname> <listname>-owner etc. aliases in /etc/majordomo_aliases
One of the other benefits of this sort of approach is that you can also do
away with the security problems with the -outgoing alias by putting it in a
different aliases file that has a different exim config associated with it
that adds the requirement that delivery only occur if it's a local delivery
request from the user majordom.
I.e. something like:
private_majordomo_aliases:
driver = aliasfile
file = /etc/majordomo_private_aliases
search_type = lsearch
user = majordom
group = mail
condition = "${if eq {$received_protocol}{local-bsmtp} {${if eq
{$sender_ident}{majordom} {true}{false}}}{false}}"
In this case you'd put things like <listname>-outgoing in this file and
anyone other than majordom doing a local delivery to this alias will get an
unknown user report.
Manar
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.5.32.19980708011815.008c2820>