Subject: Re: sendmail 8.12.4 import (and changes)
To: None <itojun@iijlab.net>
From: Andrew Brown <atatat@atatdot.net>
List: tech-security
Date: 06/26/2002 10:19:19
>	(1) use smmsp uid/gid, and sendmail.cf + submit.cf.

that's fine.

>	(2) have a queue runner run via /var/cron/tabs/root.

i prefer a separate daemon process, since a cron job can't be turned
off via rc.conf and executing "sendmail -Lsm-msp-queue -Ac -q" from
cron when the admin has switched to, eg, postfix, is almost
*guaranteed* to do the wrong thing.

>	(3) don't think there's a need for running sendmail root.  we'll
>	    think about rc.d/sendmail mods once there's needs.

fair enough.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."