Sendmail notes under Solaris 8

If you see this error:

# /usr/lib/sendmail -bd -q15m
451 4.0.0 /etc/mail/sendmail.cf: line 77: fileclass: cannot open '/etc/mail/local-host-names': Group writable directory
451 4.0.0 /etc/mail/sendmail.cf: line 492: fileclass: cannot open '/etc/mail/trusted-users': Group writable directory

You have probably applied patch 110615-04 to fix the MTA Sendmail vulnerability:


http://linux.oreillynet.com/pub/a/linux/2001/08/27/insecurities.html

which updates /etc/mail/sendmail.cf

check your version:

# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 kinscoe.harcourt.com ESMTP Sendmail 8.11.6+Sun/8.11.6; Fri, 24 May 2002 13:57:29 -0400 (EDT)
quit
Connection closed by foreign host.

If you see "8.11.6+Sun" then you have the latest patch as of 5/22/2002.

Notes:

http://www.sendmail.org/vendor/sun/differences.html

Check permissions of all Sendmail directories:

# /usr/lib/sendmail -v -d44.4 -bv postmaster
safefile(/etc/mail/sendmail.cf, uid=0, gid=0, flags=6000, mode=400):
safedirpath(/etc/mail, uid=0, gid=0, flags=6000, level=0, offset=0):
        [dir /etc] mode 40775 WARNING
        [dir /etc/mail] OK
        [uid 0, nlink 1, stat 100444, mode 400]         OK
safefile(/etc/mail/local-host-names, uid=0, gid=0, flags=6580, mode=400):
safedirpath(/etc/mail, uid=0, gid=0, flags=6580, level=0, offset=0):
        [dir /etc] mode 40775 FATAL
        [dir /etc/mail] Group writable directory
/etc/mail/sendmail.cf: line 77: fileclass: cannot open '/etc/mail/local-host-names': Group writable directory
safefile(/etc/mail/relay-domains, uid=0, gid=0, flags=6580, mode=400):
safedirpath(/etc/mail, uid=0, gid=0, flags=6580, level=0, offset=0):
        [dir /etc] mode 40775 FATAL
        [dir /etc/mail] Group writable directory
safefile(/etc/mail/trusted-users, uid=0, gid=0, flags=6580, mode=400):
safedirpath(/etc/mail, uid=0, gid=0, flags=6580, level=0, offset=0):
        [dir /etc] mode 40775 FATAL
        [dir /etc/mail] Group writable directory
/etc/mail/sendmail.cf: line 492: fileclass: cannot open '/etc/mail/trusted-users': Group writable directory
safedirpath(/var/spool/mqueue, uid=0, gid=0, flags=4, level=0, offset=0):
        [dir /var/spool/mqueue] OK

If you see the "Group writable directory" error:

You will need to set the following permissions:

# chmod go-w / /etc /etc/mail /var /var/spool /var/spool/mqueue
# chown root / /etc /etc/mail

Other resources:

http://www.sendmail.org/faq/
http://www.ebsinc.com/solaris/sendmail8.8.html (Sun Infodoc 18842)