Path: utzoo!attcan!uunet!mcsun!ukc!kl-cs!cs.glasgow.ac.uk!daemon
From: jac@doc.ic.ac.uk (Jim Crammond)
Newsgroups: mail.uk-sendmail-workers,comp.mail.sendmail
Subject: Re: Advice Please!
Message-ID: <20575.9002261623@sophocles.doc.ic.ac.uk>
Date: 26 Feb 90 16:23:34 GMT
Sender: daemon@cs.glasgow.ac.uk
Lines: 8
Approved: usenet@cs.glasgow.ac.uk
In-Reply-To: ma18@pc.mcs.salf.ac.uk's message of Thu, 22 Feb 90 10:26:01 GMT

Only "trusted users" can call sendmail with the -f flag - i.e. one that
has a "T<user>" entry in the configuration file.

The "mailer" program that calls sendmail must setuid to one of the known
trusted users.  I believe effective uid is not enough - it should do a
setuid(geteuid()) if necessary.

-Jim.