Date: Sat, 17 Nov 2001 18:19:13 -0500 From: "Kutulu" <kutulu@kutulu.org> To: "freebsd-stable@freebsd.org" <freebsd-stable@FreeBSD.ORG> Subject: sendmail (and other MTAs) as non-root user... Message-ID: <020401c16fbe$47e03570$88682518@longhill1.md.home.com>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. ------=_NextPart_000_0200_01C16F94.5CCBAF20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit I recently saw commits to -CURRENT to add standard users for sendmail (or other MTAs) to run as in place of root. This is something I've actually wanted to do for some time, but I always seem to miss some critical permissions change somewhere. What do I need to change to my existing -STABLE setup to incorporate sendmail running as non-root? Or, even better, if I'm installing exim from scratch, what do I do to it to run as non-root? I assume the spool and mail directories need to be changed, but I don't want to give away too much permission. And what users/groups should I add to keep my system in line with the new standard users? (Of course, if this change is going to be MFC'd then I'll just wait for that.) Thanks for any help, --K ------=_NextPart_000_0200_01C16F94.5CCBAF20 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII3jCCAnww ggHloAMCAQICAwW08DANBgkqhkiG9w0BAQIFADCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdl c3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsT FENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAw MC44LjMwMB4XDTAxMDkyMjE0MDAxOFoXDTAyMDkyMjE0MDAxOFowQzEfMB0GA1UEAxMWVGhhd3Rl IEZyZWVtYWlsIE1lbWJlcjEgMB4GCSqGSIb3DQEJARYRa3V0dWx1QGt1dHVsdS5vcmcwgZ8wDQYJ KoZIhvcNAQEBBQADgY0AMIGJAoGBALuDdLgCHJxCJguCs8IK+K4Fic2MZAbW1CVoIPV1qU/ez9TI z5Yv4XRDskBUZxFogDSDdYPEGCbNB8Tp7TjwD+n2zAuIuapRMySbs7zQYef/fBd01rqRBmi/A9/v bPOuKHqOAvbMqWMH2D9hjCH2d3R8cJIoCglhEtyyxm9rOee5AgMBAAGjLjAsMBwGA1UdEQQVMBOB EWt1dHVsdUBrdXR1bHUub3JnMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQECBQADgYEAlJ1wNCdT DYnUEQV9rBeSbJ8lJ1yxSHxwosdb8UzkD3H6AfRJBQQQ/qAIWh9ODW2UjMH5el3RgaZAbPUheG56 bPcKEdb+pGInFz8Rf0Baent6D3OLrvVT1wrJ+qeYuf61DHIAuorD/ZFeN8v3wLtyuuHRkPZmn/1b JgLc4S2qImIwggMpMIICkqADAgECAgEMMA0GCSqGSIb3DQEBBAUAMIHRMQswCQYDVQQGEwJaQTEV MBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xGjAYBgNVBAoTEVRoYXd0 ZSBDb25zdWx0aW5nMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMSQw IgYDVQQDExtUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgQ0ExKzApBgkqhkiG9w0BCQEWHHBlcnNv bmFsLWZyZWVtYWlsQHRoYXd0ZS5jb20wHhcNMDAwODMwMDAwMDAwWhcNMDIwODI5MjM1OTU5WjCB kjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQD Ex9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCB iQKBgQDeMzKmY8cJJUU+0m54J2eBxdqIGYKXDuNEKYpjNSptcDz63K737nRvMLwzkH/5NHGgo22Y 8cNPomXbDfpL8dbdYaX5hc1VmjUanZJ1qCeu2HL5ugL217CR3hzpq+AYA6h8Q0JQUYeDPPA5tJtU ihOH/7ObnUlmAC0JieyUa+mhaQIDAQABo04wTDApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJp dmF0ZUxhYmVsMS0yOTcwEgYDVR0TAQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAQYwDQYJKoZIhvcN AQEEBQADgYEAcxtvJmWL/xU0S1liiu1EvknH6A27j7kNaiYqYoQfuIdjdBxtt88aU5FL4c3mONnt UPQ6bDSSrOaSnG7BIwHCCafvS65y3QZn9VBvLli4tgvBUFe17BzX7xe21Yibt6KIGu05Wzl9NPy2 lhglTWr0ncXDkS+plrgFPFL83eliA0gwggMtMIIClqADAgECAgEAMA0GCSqGSIb3DQEBBAUAMIHR MQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRvd24x GjAYBgNVBAoTEVRoYXd0ZSBDb25zdWx0aW5nMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZp Y2VzIERpdmlzaW9uMSQwIgYDVQQDExtUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgQ0ExKzApBgkq hkiG9w0BCQEWHHBlcnNvbmFsLWZyZWVtYWlsQHRoYXd0ZS5jb20wHhcNOTYwMTAxMDAwMDAwWhcN MjAxMjMxMjM1OTU5WjCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAG A1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2Vy dGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZy ZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMIGf MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUadfUsJRkW3HpR9gMUbbqcpGwhF59LQ2PexLfhSV1 KHQ6QixjJ5+Ve0vvfhmHHYbqo925zpZkGsIUbkSsfOaP6E0PcR9AOKYAo4d49vmUhl6t6sBeduvZ FKNdbnp8DKVLVX8GGSl/npom1Wq7OCQIapjHsdqjmJH9edvlWsQcuQIDAQABoxMwETAPBgNVHRMB Af8EBTADAQH/MA0GCSqGSIb3DQEBBAUAA4GBAMfskn5O+PWWpWdiKqTwTRFg0G+NYFhhrCa7UjVc CM8w+6hKloofYkIjjBcP9LpknBesRynfnZhe0mxgcVyirNx54+duAEcftQ0o6AKd5Jr9E/Sm2Xyx +NxfIyYJkYBz0BQb3kOpgyXy5pwvFcr+pquKB3WLDN1RhGvk+NHOd6KBMYIB/jCCAfoCAQEwgZow gZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93 bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UE AxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMAIDBbTwMAkGBSsOAwIaBQCggbowGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDExMTE3MjMxOTEzWjAjBgkq hkiG9w0BCQQxFgQUjOzVxjLPWukE6BRq+O3jrhV0SkwwWwYJKoZIhvcNAQkPMU4wTDAKBggqhkiG 9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwBwYFKw4DAh0wDQYJKoZIhvcNAQEBBQAEgYCVesQOlWmhHSHWCq6zk0J574fzKCR4NWnVI0bc pe4xury4zOQmKzWqY4YV29idxqO0YT3pu5EW7CQuEzhbJ5MrWAsJemVCu2Dh7oXEJ4UOa8RkLS14 lQxAkkXEgs3dvA8AO3cyV1XQT65GY8wBoC7TPOJ5We4KatHSABAaaxshegAAAAAAAA== ------=_NextPart_000_0200_01C16F94.5CCBAF20-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?020401c16fbe$47e03570$88682518>