The mailing list for listmasters using Sympa

[Peter Farmer <address@concealed>]

On Tuesday 06 June 2006 3:36 pm, Olivier Salaün - CRU wrote:
> We need to make things clearer regarding permissions on aliases and
> aliases.db files...
>
> Here are the privileges that work fine on our FC4 + sendmail :
>
>     -rwxr-xr-x  1 sympa sympa xx /home/sympa/bin/alias_manager.pl*
>     -rwsr-x---  1 root  sympa xx /home/sympa/bin/aliaswrapper*
>     -rw-r--r--  1 sympa root  xx /etc/mail/sympa_aliases
>     -rw-r-----  1 root  users xx /etc/mail/sympa_aliases.db
>

Strange. The documentation for sendmail very explicitly states that the 
aliases file and databases must be owned by root and only writable by root 
- unless the "DontBlameSendmail" option is used to disable that 
requirement. 
Out of the box FC4 doesnt turn off that security, so what works for you , 
shouldnt, by my understanding - unless the 
DontBlameSendmail=GroupWritableAliasFile option has been specified in 
sendmail.cf .

Perhaps those rules only apply to the standard aliases files  
(/etc/mail/aliases*) and not to any extra alias files added in the 
sendmail.cf options ???

Regards
Peter Farmer


> Redmond Militante wrote:
> >I received this in regards to an installation of sympa I was configuring
> > to work with Postfix.  I'm now experiencing the same problem - namely,
> > that sympa auto creation of alias fails - on a machine on which I'd
> > like to use sendmail as my MTA.
> >
> >snippet of our sympa.logs
> >Jun  2 15:41:32 announce wwsympa[6204]: [robot announce.uchicago.edu]
> > [client 128.135.0.88] [user address@concealed] do_create_list, get
> > action : do_it Jun  2 15:41:32 announce wwsympa[6204]:
> > admin::check_topics(computing/apps,announce.uchicago.edu) Jun  2
> > 15:41:32 announce wwsympa[6204]: admin::install_aliases : Unable to run
> > newaliases
> >
> >snippet of /var/log/maillog
> >Jun  2 14:48:55 announce sendmail[2811]: NOQUEUE: SYSERR(root): hash map
> > "Alias1": unsafe map file /etc/mail/sympa_aliases.db: Permission denied
> > Jun  2 14:48:55 announce sendmail[2811]: NOQUEUE: SYSERR(root): Cannot
> > create database for alias file /etc/mail/sympa_aliases
> >
> >/etc/mail/sympa_aliases and /etc/mail/sympa_aliases.db were copied from
> > another machine.  I'd like to replicate these aliases onto the new
> > server.  I've modified sympa_aliases so that the hostname is the
> > hostname of the new machine.
> >
> >Permissions for /etc/mail are
> >drwxr-xr-x   3 sympa sympa   4096 Jun  2 15:49 mail
> >
> >Permissions for /etc/mail/sympa_aliases* are
> >-rw-r--r--   1 sympa sympa  9243 Jun  2 15:48 sympa_aliases
> >-rw-r--r--   1 sympa smmsp 24576 Jun  2 15:48 sympa_aliases.db
> >
> >-I have tried various permissions for /etc/mail/sympa_aliases and
> > /etc/mail/sympa_aliases.db.  I've tried making root:root, sympa:sympa,
> > sympa:smmsp, and smmsp:smmsp owner of the sympa_aliases.db file -
> > nothing has worked so far, I still receive the same error in maillog.
> >
> >This server is RHEL 4.  I've compiled sympa with
> >./configure --with-bindir=/etc/smrsh