On Sat, 10 Mar 2001, Olaf Zaplinski wrote:

> I had to compile sendmail with -D_FFR_UNSAFE_SASL, okay. But now I have to
> enable the option DontBlameSendmail. But how? It's not clearly mentioned in
> the sendmail... err, let's name that 'docs'. ;-)


In cf/README (funny name for a file, isn't it?):

[...]
+--------------------------------+
| TWEAKING CONFIGURATION OPTIONS |
+--------------------------------+

There are a large number of configuration options that don't normally
need to be changed.  However, if you feel you need to tweak them, you
can define the following M4 variables.  This list is shown in four
columns:  the name you define, the default value for that definition,
the option or macro that is affected (either Ox for an option or Dx
for a macro), and a brief description.  Greater detail of the semantics
can be found in the Installation and Operations Guide.

[...]
confDONT_BLAME_SENDMAIL DontBlameSendmail
                                        [safe] Override sendmail's file
                                        safety checks.  This will definitely
                                        compromise system security and should
                                        not be used unless absolutely
                                        necessary.


So, in your favourite *.mc file:

define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLFile')


and you should find in your sendmail.cf:

O DontBlameSendmail=GroupReadableSASLFile


As a real world example:

# grep lame /etc/sendmail.cf
O DontBlameSendmail=groupreadablesaslfile

(this is currently running on my system)

> 
> Which of these is it?
> 
> 1.
> DAEMON_OPTIONS('DontBlameSendmail', `GroupReadableSASLFile')

(it has nothing to do with daemon mode, file permission checks will
be performed even without -bd)

> 2.
> FEATURE('DontBlameSendmail', `GroupReadableSASLFile')

(it's not listed as a feature... see cf/README)

> 3.
> define('DontBlameSendmail', `GroupReadableSASLFile') this one did not work

(of course not, the m4 variable name is confDONT_BLAME_SENDMAIL)

> 4.
> LOCAL_CONFIG
> DontBlameSendmail=GroupReadableSASLFile

(close, just the missing O... the preferred way should be the define above)


> 
> Olaf
> 

.TM.
-- 
      ____/  ____/   /
     /      /       /                   Marco Colombo
    ___/  ___  /   /                  Technical Manager
   /          /   /                      ESI s.r.l.
 _____/ _____/  _/                     [EMAIL PROTECTED]

Reply via email to