From owner-freebsd-hackers Fri Apr 11 15:52:59 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id PAA27201 for hackers-outgoing; Fri, 11 Apr 1997 15:52:59 -0700 (PDT) Received: from fps.biblos.unal.edu.co ([168.176.37.11]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id PAA27195 for ; Fri, 11 Apr 1997 15:52:54 -0700 (PDT) From: pgiffuni@fps.biblos.unal.edu.co Received: from localhost by fps.biblos.unal.edu.co (AIX 4.1/UCB 5.64/4.03) id AA28150; Fri, 11 Apr 1997 17:52:20 -0500 Date: Fri, 11 Apr 1997 17:52:20 -0500 (EST) To: "Jordan K. Hubbard" Cc: hackers@freebsd.org Subject: Re: on the subject of changes to -RELEASEs... In-Reply-To: <20865.860782035@time.cdrom.com> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk On Fri, 11 Apr 1997, Jordan K. Hubbard wrote: > > Besides, you can burn yourself with this feature when you make a > > change to the /etc/xxx file and forget to disable writing to it... > > I think the idea would be that you'd be discouraged from writing > changes there. There is precedent - you're technically not supposed > to modify your sendmail.cf, for example, but rather build it from > source using the convenient feature macros. > > Jordan Speaking of which..... Looking into /etc/sendmail.cf (2.2-Release),It reads: _____________ Mprog, P=/bin/sh, F=lsDFMoqeu9, S=10/30, R=20/40, D=$z:/, T=X-Unix, A=sh -c $u _____________ I have not heard of cracking attempts to sendmail RECENTLY, but it IS recommended to use smrsh (included with sendmail) on all versions. Why aren't we including this? (yes, there is a macro to do this) I always end up hand editing this, not to mention that I also add a mail user without privileges to avoid running sendmail as root. --Pedro.