From owner-freebsd-isp Tue Jul 7 17:20:05 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA25635 for freebsd-isp-outgoing; Tue, 7 Jul 1998 17:20:05 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from stingray.ivision.co.uk (stingray.ivision.co.uk [195.50.91.40]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id RAA25568 for ; Tue, 7 Jul 1998 17:19:55 -0700 (PDT) (envelope-from manar@ivision.co.uk) Received: from pretender.ivision.co.uk [194.112.52.86] by stingray.ivision.co.uk with smtp (Exim 1.62 #2) id 0ythxb-0006sw-00; Wed, 8 Jul 1998 01:19:48 +0100 Message-Id: <3.0.5.32.19980708011815.008c2820@stingray.ivision.co.uk> X-Sender: manarpop@stingray.ivision.co.uk X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Wed, 08 Jul 1998 01:18:15 +0100 To: Paulo Fragoso From: Manar Hussain Subject: Re: Majordomo Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: References: <3.0.5.32.19980706230046.007fb420@stingray.ivision.co.uk> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Yes, I would like to learn how to make majordomo (wrapper) without suid. >Can you help me? As I said we use Exim. We find it an excellently documented alternative to sendmail that's better in most other respects we can think of whilst still looking like sendmail enough that other programs can't tell the difference (We install Exim "as" sendmail). You can get details on it (including where to get it) at www.exim.org Here is what we might put in the exim config file that (a) define a new aliases file for majordomo aliases and (b) states that delivery for these aliases should be as the user "majordom majordomo_aliases: driver = aliasfile file = /etc/majordomo_aliases search_type = lsearch user = majordom group = mail So put the -owner etc. aliases in /etc/majordomo_aliases One of the other benefits of this sort of approach is that you can also do away with the security problems with the -outgoing alias by putting it in a different aliases file that has a different exim config associated with it that adds the requirement that delivery only occur if it's a local delivery request from the user majordom. I.e. something like: private_majordomo_aliases: driver = aliasfile file = /etc/majordomo_private_aliases search_type = lsearch user = majordom group = mail condition = "${if eq {$received_protocol}{local-bsmtp} {${if eq {$sender_ident}{majordom} {true}{false}}}{false}}" In this case you'd put things like -outgoing in this file and anyone other than majordom doing a local delivery to this alias will get an unknown user report. Manar To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message