🚀 go-pugleaf

In article <BsKHGA.9zr@world.std.com> sandyb@world.std.com (Sandy Bendremer) writes:
>I am running sendmail 4.1 on System 5 Rel 4 (ouch!).  I have a special 
>mailer that must be run as root (both real and effective UID).  Although
>sendmail is SUID root on our system, when it runs, the real UID is the
>user sending the mail.  Although the mailer is a shell script (where I
>have some control), ultimately a canned executable is run and it must
>be root!  I know sendmail has a default user option and the 'S' mailer
>flag, but none of these seems to do anything.

  Define a mailer for this.  If your system doesn't grok '#! /bin/sh' you
can define the mailer to be /bin/sh in the P= (path) option, and include
the script name in the A= (argument string).

  Give your mailer the 'S' flag, so that sendmail will run it without
changing uid.  Also give the mailer the 'e' flag to mark it expensive.

  Make sure you have the line 'Oc' in your configuration.

  The effect should be that the mail will be queued initially, and only
delivered to the mailer on queue runs.  The real and effective uid should
be root during queue runs.

  Alternatively, you might consider installing perl, and using a perl
script in place of a shell script.  A perl script can be run with
effective uid 0, and change itself to also have real uid of 0. [But
don't ask for help - I'm no perl expert.]