procmail
[Top] [All Lists]

Re: Procmail - Sendmail 8.9 - AutoResponders

1998-10-07 09:16:22
add:   "| /usr/bin/procmail -m /etc/procmailrcs/add"

I've also upgraded my Sendmail from 8.8.x to 8.9.x.  Now I get this error:

Oct  7 09:09:58 kira sendmail[5849]: JAA05848: to=wbs, delay=00:00:01,
xdelay=00:00:01, mailer=local, stat=Sent
Oct  7 09:09:58 kira wbs[1]: procmail[5853]: Denying special privileges for
"/etc/procmailrcs/add"

sendmail 8.9.x introduces a whole bunch of new security features, most of which
revolve around denying services in what could be an insecure environment.  Check
the permissions on your procmail binary and the directory that it's in, then 
change
it *or* add the appropriate entry or entries to the DontBlameSendmail option.  
Relevant options might be:

   RunProgramInUnsafeDirPath
   RunWritableProgram
   GroupWritableDirPathSafe
   FileDeliveryToHardLink
   FileDeliveryToSymLink

So to cover most bases, you could add this to /etc/sendmail.cf:

   O 
DontBlameSendmail=RunProgramInUnsafeDirPath,RunWritableProgram,GroupWritableDirPathSafe,FileDeliveryToHardLink,FileDeliveryToSymLink

If at all possible the problem-causing permissions or conditions should be 
changed.
There's usually no reason to have procmail writeable by everyone, etc.  

Chris