head	1.2;
access;
symbols
	RELENG_8_4:1.2.0.18
	RELENG_9_1_0_RELEASE:1.2
	RELENG_9_1:1.2.0.16
	RELENG_9_1_BP:1.2
	RELENG_8_3_0_RELEASE:1.2
	RELENG_8_3:1.2.0.14
	RELENG_8_3_BP:1.2
	RELENG_9_0_0_RELEASE:1.2
	RELENG_9_0:1.2.0.12
	RELENG_9_0_BP:1.2
	RELENG_9:1.2.0.10
	RELENG_9_BP:1.2
	RELENG_7_4_0_RELEASE:1.1.1.9.18.1
	RELENG_8_2_0_RELEASE:1.2
	RELENG_7_4:1.1.1.9.18.1.0.8
	RELENG_7_4_BP:1.1.1.9.18.1
	RELENG_8_2:1.2.0.8
	RELENG_8_2_BP:1.2
	RELENG_8_1_0_RELEASE:1.2
	RELENG_8_1:1.2.0.6
	RELENG_8_1_BP:1.2
	RELENG_7_3_0_RELEASE:1.1.1.9.18.1
	RELENG_7_3:1.1.1.9.18.1.0.6
	RELENG_7_3_BP:1.1.1.9.18.1
	RELENG_8_0_0_RELEASE:1.2
	RELENG_8_0:1.2.0.4
	RELENG_8_0_BP:1.2
	RELENG_8:1.2.0.2
	RELENG_8_BP:1.2
	RELENG_7_2_0_RELEASE:1.1.1.9.18.1
	RELENG_7_2:1.1.1.9.18.1.0.4
	RELENG_7_2_BP:1.1.1.9.18.1
	RELENG_7_1_0_RELEASE:1.1.1.9.18.1
	RELENG_6_4_0_RELEASE:1.1.1.9.8.1
	RELENG_7_1:1.1.1.9.18.1.0.2
	RELENG_7_1_BP:1.1.1.9.18.1
	RELENG_6_4:1.1.1.9.8.1.0.2
	RELENG_6_4_BP:1.1.1.9.8.1
	RELENG_7_0_0_RELEASE:1.1.1.9
	RELENG_6_3_0_RELEASE:1.1.1.9
	RELENG_7_0:1.1.1.9.0.22
	RELENG_7_0_BP:1.1.1.9
	RELENG_6_3:1.1.1.9.0.20
	RELENG_6_3_BP:1.1.1.9
	v8_14_2:1.1.1.9
	RELENG_7:1.1.1.9.0.18
	RELENG_7_BP:1.1.1.9
	v8_14_1:1.1.1.9
	RELENG_6_2_0_RELEASE:1.1.1.9
	RELENG_6_2:1.1.1.9.0.16
	RELENG_6_2_BP:1.1.1.9
	v8_13_8:1.1.1.9
	v8_13_7:1.1.1.9
	RELENG_5_5_0_RELEASE:1.1.1.9
	RELENG_5_5:1.1.1.9.0.14
	RELENG_5_5_BP:1.1.1.9
	RELENG_6_1_0_RELEASE:1.1.1.9
	RELENG_6_1:1.1.1.9.0.12
	RELENG_6_1_BP:1.1.1.9
	v8_13_6:1.1.1.9
	RELENG_6_0_0_RELEASE:1.1.1.9
	RELENG_6_0:1.1.1.9.0.10
	RELENG_6_0_BP:1.1.1.9
	RELENG_6:1.1.1.9.0.8
	RELENG_6_BP:1.1.1.9
	v8_13_4:1.1.1.9
	RELENG_5_4_0_RELEASE:1.1.1.9
	RELENG_5_4:1.1.1.9.0.6
	RELENG_5_4_BP:1.1.1.9
	v8_13_3:1.1.1.9
	RELENG_4_11_0_RELEASE:1.1.1.2.6.5
	RELENG_4_11:1.1.1.2.6.5.0.2
	RELENG_4_11_BP:1.1.1.2.6.5
	RELENG_5_3_0_RELEASE:1.1.1.9
	RELENG_5_3:1.1.1.9.0.4
	RELENG_5_3_BP:1.1.1.9
	RELENG_5:1.1.1.9.0.2
	RELENG_5_BP:1.1.1.9
	v8_13_1:1.1.1.9
	RELENG_4_10_0_RELEASE:1.1.1.2.6.4
	RELENG_4_10:1.1.1.2.6.4.0.2
	RELENG_4_10_BP:1.1.1.2.6.4
	RELENG_5_2_1_RELEASE:1.1.1.8
	v8_12_11:1.1.1.8
	RELENG_5_2_0_RELEASE:1.1.1.8
	RELENG_5_2:1.1.1.8.0.2
	RELENG_5_2_BP:1.1.1.8
	RELENG_4_9_0_RELEASE:1.1.1.2.6.3
	RELENG_4_9:1.1.1.2.6.3.0.8
	RELENG_4_9_BP:1.1.1.2.6.3
	v8_12_10:1.1.1.8
	RELENG_5_1_0_RELEASE:1.1.1.7
	RELENG_5_1:1.1.1.7.0.4
	RELENG_5_1_BP:1.1.1.7
	RELENG_4_8_0_RELEASE:1.1.1.2.6.3
	v8_12_9:1.1.1.7
	RELENG_4_8:1.1.1.2.6.3.0.6
	RELENG_4_8_BP:1.1.1.2.6.3
	v8_12_8:1.1.1.7
	v8_12_7:1.1.1.7
	RELENG_5_0_0_RELEASE:1.1.1.7
	RELENG_5_0:1.1.1.7.0.2
	RELENG_5_0_BP:1.1.1.7
	RELENG_4_7_0_RELEASE:1.1.1.2.6.3
	RELENG_4_7:1.1.1.2.6.3.0.4
	RELENG_4_7_BP:1.1.1.2.6.3
	v8_12_6:1.1.1.7
	RELENG_4_6_2_RELEASE:1.1.1.2.6.3
	RELENG_4_6_1_RELEASE:1.1.1.2.6.3
	v8_12_5:1.1.1.7
	v8_12_4:1.1.1.7
	RELENG_4_6_0_RELEASE:1.1.1.2.6.3
	RELENG_4_6:1.1.1.2.6.3.0.2
	RELENG_4_6_BP:1.1.1.2.6.3
	v8_12_3_20020420:1.1.1.6
	v8_12_3:1.1.1.5
	v8_12_2:1.1.1.5
	RELENG_4_5_0_RELEASE:1.1.1.2.6.2
	RELENG_4_5:1.1.1.2.6.2.0.6
	RELENG_4_5_BP:1.1.1.2.6.2
	RELENG_4_4_0_RELEASE:1.1.1.2.6.2
	RELENG_4_4:1.1.1.2.6.2.0.4
	RELENG_4_4_BP:1.1.1.2.6.2
	v8_11_6:1.1.1.4
	v8_11_5:1.1.1.4
	v8_11_4:1.1.1.4
	RELENG_4_3_0_RELEASE:1.1.1.2.6.2
	RELENG_4_3:1.1.1.2.6.2.0.2
	RELENG_4_3_BP:1.1.1.2.6.2
	v8_11_3:1.1.1.4
	v8_11_2:1.1.1.4
	RELENG_4_2_0_RELEASE:1.1.1.2.6.1
	v8_11_1:1.1.1.3
	RELENG_4_1_1_RELEASE:1.1.1.2.6.1
	PRE_SMPNG:1.1.1.3
	v8_11_0:1.1.1.3
	RELENG_4_1_0_RELEASE:1.1.1.2
	RELENG_3_5_0_RELEASE:1.1.1.2
	RELENG_4_0_0_RELEASE:1.1.1.2
	RELENG_4:1.1.1.2.0.6
	RELENG_4_BP:1.1.1.2
	RELENG_3_4_0_RELEASE:1.1.1.2
	RELENG_3_3_0_RELEASE:1.1.1.2
	RELENG_3_2_PAO:1.1.1.2.0.4
	RELENG_3_2_PAO_BP:1.1.1.2
	RELENG_3_2_0_RELEASE:1.1.1.2
	RELENG_3_1_0_RELEASE:1.1.1.2
	v8_9_3:1.1.1.2
	v8_9_2_header:1.1.1.2
	RELENG_3:1.1.1.2.0.2
	RELENG_3_BP:1.1.1.2
	v8_9_2:1.1.1.2
	RELENG_3_0_0_RELEASE:1.1.1.1
	v8_9_1:1.1.1.1
	SENDMAIL:1.1.1;
locks; strict;
comment	@# @;


1.2
date	2008.08.28.06.08.29;	author gshapiro;	state Exp;
branches
	1.2.18.1;
next	1.1;

1.1
date	98.08.03.05.56.20;	author peter;	state Exp;
branches
	1.1.1.1;
next	;

1.2.18.1
date	2008.08.28.06.08.29;	author svnexp;	state dead;
branches;
next	1.2.18.2;

1.2.18.2
date	2013.03.28.13.02.00;	author svnexp;	state Exp;
branches;
next	;

1.1.1.1
date	98.08.03.05.56.20;	author peter;	state Exp;
branches;
next	1.1.1.2;

1.1.1.2
date	99.01.12.12.25.50;	author peter;	state Exp;
branches
	1.1.1.2.6.1;
next	1.1.1.3;

1.1.1.3
date	2000.08.12.21.55.31;	author gshapiro;	state Exp;
branches;
next	1.1.1.4;

1.1.1.4
date	2001.01.21.22.16.48;	author gshapiro;	state Exp;
branches;
next	1.1.1.5;

1.1.1.5
date	2002.02.17.21.56.43;	author gshapiro;	state Exp;
branches;
next	1.1.1.6;

1.1.1.6
date	2002.04.20.20.31.45;	author gshapiro;	state Exp;
branches;
next	1.1.1.7;

1.1.1.7
date	2002.06.11.21.11.54;	author gshapiro;	state Exp;
branches;
next	1.1.1.8;

1.1.1.8
date	2003.09.19.23.11.15;	author gshapiro;	state Exp;
branches;
next	1.1.1.9;

1.1.1.9
date	2004.08.01.01.04.40;	author gshapiro;	state Exp;
branches
	1.1.1.9.8.1
	1.1.1.9.18.1;
next	;

1.1.1.2.6.1
date	2000.08.27.17.31.24;	author gshapiro;	state Exp;
branches;
next	1.1.1.2.6.2;

1.1.1.2.6.2
date	2001.02.01.00.54.44;	author gshapiro;	state Exp;
branches;
next	1.1.1.2.6.3;

1.1.1.2.6.3
date	2002.03.25.21.25.54;	author gshapiro;	state Exp;
branches;
next	1.1.1.2.6.4;

1.1.1.2.6.4
date	2003.10.30.22.31.42;	author gshapiro;	state Exp;
branches;
next	1.1.1.2.6.5;

1.1.1.2.6.5
date	2004.08.09.00.15.40;	author gshapiro;	state Exp;
branches;
next	;

1.1.1.9.8.1
date	2008.08.30.00.21.55;	author gshapiro;	state Exp;
branches;
next	;

1.1.1.9.18.1
date	2008.08.30.00.20.49;	author gshapiro;	state Exp;
branches;
next	;


desc
@@


1.2
log
@SVN rev 182352 on 2008-08-28 06:08:29Z by gshapiro

Merge sendmail 8.14.3 into HEAD.

Note: As the first merge since the conversion to svn, it includes many
propset changes to get the proper svn:eol-style and svn:mime-type on the
files (as merged from the fixed up vendor/dist area).

MFC after:	3 days
@
text
@
README  smrsh - sendmail restricted shell.

This README file is provided as a courtesy of the CERT Coordination Center,
Software Engineering Institute, Carnegie Mellon University.  This file is
intended as a supplement to the CERT advisory CA-93:16.sendmail.vulnerability,
and to the software, smrsh.c, written by Eric Allman.



The smrsh(8) program is intended as a replacement for /bin/sh in the
program mailer definition of sendmail(8).  This README file describes
the steps needed to compile and install smrsh.

smrsh is a restricted shell utility that provides the ability to
specify, through a configuration, an explicit list of executable
programs.  When used in conjunction with sendmail, smrsh effectively
limits sendmail's scope of program execution to only those programs
specified in smrsh's configuration.

smrsh has been written with portability in mind, and uses traditional
Unix library utilities.  As such, smrsh should compile on most
Unix C compilers.

smrsh should build on most systems with the enclosed Build script:

	host.domain% sh ./Build

To compile smrsh.c by hand, use the following command:

	host.domain% cc -o smrsh smrsh.c

For machines that provide dynamic linking, it is advisable to compile
smrsh without dynamic linking.  As an example with the Sun Microsystems
compiler, you should compile with the -Bstatic option.

	host.domain% cc -Bstatic -o smrsh smrsh.c
		or
	host.domain% sh ./Build LDOPTS=-Bstatic

With gcc, the GNU C compiler, use the -static option.

	host.domain% cc -static -o smrsh smrsh.c
		or
	host.domain% sh ./Build LDOPTS=-static

The following C defines can be set defined to change the search path and
the bin directory used by smrsh.

-DSMRSH_PATH=\"path\"	\"/bin:/usr/bin:/usr/ucb\"	The default search
							path.
-DSMRSH_CMDDIR=\"dir\"	\"/usr/adm/sm.bin\"		The default smrsh
							program directory
 
These can be added to the devtools/Site/site.config.m4 file using the
global M4 macro confENVDEF or the smrsh specific M4 macro
conf_smrsh_ENVDEF.

As root, install smrsh in /usr/libexec.  Using the Build script:

	host.domain# sh ./Build install

For manual installation: install smrsh in the /usr/libexec
directory, with mode 511.

	host.domain# mv smrsh /usr/libexec
	host.domain# chmod 511 /usr/libexec/smrsh



Next, determine the list of commands that smrsh should allow sendmail
to run.  This list of allowable commands can be determined by:

   1.  examining your /etc/mail/aliases file, to indicate what commands
       are being used by the system.

   2.  surveying your host's .forward files, to determine what
       commands users have specified.

See the man page for aliases(5) if you are unfamiliar with the format of
these specifications. Additionally, you should include in the list,
popular commands such as /usr/ucb/vacation.

You should NOT include interpreter programs such as sh(1), csh(1),
perl(1), uudecode(1) or the stream editor sed(1) in your list of
acceptable commands.

If your platform doesn't have a default SMRSH_CMDDIR setting, you will
next need to create the directory /usr/adm/sm.bin and populate
it with the programs that your site feels are allowable for sendmail
to execute.   This directory is explicitly specified in the source
code for smrsh, so changing this directory must be accompanied with
a change in smrsh.c.


You will have to be root to make these modifications.

After creating the /usr/adm/sm.bin directory, either copy the programs
to the directory, or establish links to the allowable programs from
/usr/adm/sm.bin.  Change the file permissions, so that these programs
can not be modified by non-root users.  If you use links, you should
ensure that the target programs are not modifiable.

To allow the popular vacation(1) program by creating a link in the
/usr/adm/sm.bin directory, you should:

	host.domain# cd /usr/adm/sm.bin
	host.domain# ln -s /usr/ucb/vacation vacation




After populating the /usr/adm/sm.bin directory, you can now configure
sendmail to use the restricted shell.  Save the current sendmail.cf
file prior to modifying it, as a prudent precaution.

Typically, the program mailer is defined by a single line in the
sendmail configuration file, sendmail.cf.  This file is traditionally
found in the /etc, /usr/lib or /etc/mail directories, depending on
the UNIX vendor.

If you are unsure of the location of the actual sendmail configuration
file, a search of the strings(1) output of the sendmail binary, will
help to locate it.

In order to configure sendmail to use smrsh, you must modify the Mprog
definition in the sendmail.cf file, by replacing the /bin/sh specification
with /usr/libexec/smrsh.

As an example:

In most Sun Microsystems' sendmail.cf files, the line is:
Mprog,	P=/bin/sh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u

which should be changed to:
Mprog,	P=/usr/libexec/smrsh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u
          ^^^^^^^^^^^^^^^^^^

A more generic line may be:
Mprog,		P=/bin/sh, F=lsDFM, A=sh -c $u

and should be changed to;
Mprog,		P=/usr/libexec/smrsh, F=lsDFM, A=sh -c $u


After modifying the Mprog definition in the sendmail.cf file, if a frozen
configuration file is being used, it is essential to create a new one.
You can determine if you need a frozen configuration by discovering
if a sendmail.fc file currently exists in either the /etc/, /usr/lib,
or /etc/mail directories.  The specific location can be determined using
a search of the strings(1) output of the sendmail binary.

In order to create a new frozen configuration, if it is required:
	host.domain# /usr/lib/sendmail -bz

Now re-start the sendmail process.  An example of how to do this on
a typical system follows:

	host.domain# cat /var/run/sendmail.pid
	130
	/usr/sbin/sendmail -bd -q30m
	host.domain# /bin/kill -15 130
	host.domain# /usr/sbin/sendmail -bd -q30m


$Revision: 8.10 $, Last updated $Date: 2008/02/12 16:40:06 $
@


1.2.18.1
log
@file README was added on branch RELENG_8_4 on 2013-03-28 13:02:00 +0000
@
text
@d1 166
@


1.2.18.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 166

README  smrsh - sendmail restricted shell.

This README file is provided as a courtesy of the CERT Coordination Center,
Software Engineering Institute, Carnegie Mellon University.  This file is
intended as a supplement to the CERT advisory CA-93:16.sendmail.vulnerability,
and to the software, smrsh.c, written by Eric Allman.



The smrsh(8) program is intended as a replacement for /bin/sh in the
program mailer definition of sendmail(8).  This README file describes
the steps needed to compile and install smrsh.

smrsh is a restricted shell utility that provides the ability to
specify, through a configuration, an explicit list of executable
programs.  When used in conjunction with sendmail, smrsh effectively
limits sendmail's scope of program execution to only those programs
specified in smrsh's configuration.

smrsh has been written with portability in mind, and uses traditional
Unix library utilities.  As such, smrsh should compile on most
Unix C compilers.

smrsh should build on most systems with the enclosed Build script:

	host.domain% sh ./Build

To compile smrsh.c by hand, use the following command:

	host.domain% cc -o smrsh smrsh.c

For machines that provide dynamic linking, it is advisable to compile
smrsh without dynamic linking.  As an example with the Sun Microsystems
compiler, you should compile with the -Bstatic option.

	host.domain% cc -Bstatic -o smrsh smrsh.c
		or
	host.domain% sh ./Build LDOPTS=-Bstatic

With gcc, the GNU C compiler, use the -static option.

	host.domain% cc -static -o smrsh smrsh.c
		or
	host.domain% sh ./Build LDOPTS=-static

The following C defines can be set defined to change the search path and
the bin directory used by smrsh.

-DSMRSH_PATH=\"path\"	\"/bin:/usr/bin:/usr/ucb\"	The default search
							path.
-DSMRSH_CMDDIR=\"dir\"	\"/usr/adm/sm.bin\"		The default smrsh
							program directory
 
These can be added to the devtools/Site/site.config.m4 file using the
global M4 macro confENVDEF or the smrsh specific M4 macro
conf_smrsh_ENVDEF.

As root, install smrsh in /usr/libexec.  Using the Build script:

	host.domain# sh ./Build install

For manual installation: install smrsh in the /usr/libexec
directory, with mode 511.

	host.domain# mv smrsh /usr/libexec
	host.domain# chmod 511 /usr/libexec/smrsh



Next, determine the list of commands that smrsh should allow sendmail
to run.  This list of allowable commands can be determined by:

   1.  examining your /etc/mail/aliases file, to indicate what commands
       are being used by the system.

   2.  surveying your host's .forward files, to determine what
       commands users have specified.

See the man page for aliases(5) if you are unfamiliar with the format of
these specifications. Additionally, you should include in the list,
popular commands such as /usr/ucb/vacation.

You should NOT include interpreter programs such as sh(1), csh(1),
perl(1), uudecode(1) or the stream editor sed(1) in your list of
acceptable commands.

If your platform doesn't have a default SMRSH_CMDDIR setting, you will
next need to create the directory /usr/adm/sm.bin and populate
it with the programs that your site feels are allowable for sendmail
to execute.   This directory is explicitly specified in the source
code for smrsh, so changing this directory must be accompanied with
a change in smrsh.c.


You will have to be root to make these modifications.

After creating the /usr/adm/sm.bin directory, either copy the programs
to the directory, or establish links to the allowable programs from
/usr/adm/sm.bin.  Change the file permissions, so that these programs
can not be modified by non-root users.  If you use links, you should
ensure that the target programs are not modifiable.

To allow the popular vacation(1) program by creating a link in the
/usr/adm/sm.bin directory, you should:

	host.domain# cd /usr/adm/sm.bin
	host.domain# ln -s /usr/ucb/vacation vacation




After populating the /usr/adm/sm.bin directory, you can now configure
sendmail to use the restricted shell.  Save the current sendmail.cf
file prior to modifying it, as a prudent precaution.

Typically, the program mailer is defined by a single line in the
sendmail configuration file, sendmail.cf.  This file is traditionally
found in the /etc, /usr/lib or /etc/mail directories, depending on
the UNIX vendor.

If you are unsure of the location of the actual sendmail configuration
file, a search of the strings(1) output of the sendmail binary, will
help to locate it.

In order to configure sendmail to use smrsh, you must modify the Mprog
definition in the sendmail.cf file, by replacing the /bin/sh specification
with /usr/libexec/smrsh.

As an example:

In most Sun Microsystems' sendmail.cf files, the line is:
Mprog,	P=/bin/sh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u

which should be changed to:
Mprog,	P=/usr/libexec/smrsh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u
          ^^^^^^^^^^^^^^^^^^

A more generic line may be:
Mprog,		P=/bin/sh, F=lsDFM, A=sh -c $u

and should be changed to;
Mprog,		P=/usr/libexec/smrsh, F=lsDFM, A=sh -c $u


After modifying the Mprog definition in the sendmail.cf file, if a frozen
configuration file is being used, it is essential to create a new one.
You can determine if you need a frozen configuration by discovering
if a sendmail.fc file currently exists in either the /etc/, /usr/lib,
or /etc/mail directories.  The specific location can be determined using
a search of the strings(1) output of the sendmail binary.

In order to create a new frozen configuration, if it is required:
	host.domain# /usr/lib/sendmail -bz

Now re-start the sendmail process.  An example of how to do this on
a typical system follows:

	host.domain# cat /var/run/sendmail.pid
	130
	/usr/sbin/sendmail -bd -q30m
	host.domain# /bin/kill -15 130
	host.domain# /usr/sbin/sendmail -bd -q30m


$Revision: 8.10 $, Last updated $Date: 2008/02/12 16:40:06 $
@


1.1
log
@Initial revision
@
text
@a1 2


a3 3
	@@(#)README	8.2	11/11/95


d5 1
a5 1
Software Engineering Institute, Carnegie Mellon University.  This file is 
d21 1
a21 1
smrsh has been written with portability in mind, and uses traditional 
d25 1
d27 1
d29 1
a29 1
To compile smrsh.c, use the following command:
d31 1
a31 1
host.domain% cc -o smrsh smrsh.c
d37 21
a57 1
host.domain% cc -Bstatic -o smrsh smrsh.c
d59 1
d61 1
a61 2
Choose a directory that smrsh will reside in.  We will use the traditional 
/usr/local/etc directory for the remainder of this document.
d63 2
a64 1
As root, install smrsh in /usr/local/etc directory, with mode 511.
d66 2
a67 2
host.domain# mv smrsh /usr/local/etc
host.domain# chmod 511 /usr/local/etc/smrsh
d74 2
a75 2
   1.  examining your /etc/aliases file, to indicate what commands 
       are being used by the system. 
d77 2
a78 2
   2.  surveying your host's .forward files, to determine what 
       commands users have specified.  
d80 2
a81 2
See the man page for aliases(5) if you are unfamiliar with the format of 
these specifications. Additionally, you should include in the list, 
d85 1
a85 1
perl(1), uudecode(1) or the stream editor sed(1) in your list of 
d88 2
a89 2

You will next need to create the directory /usr/adm/sm.bin and populate 
d104 1
a104 1
To allow the popular vacation(1) program by creating a link in the 
d107 2
a108 2
host.domain# cd /usr/adm/sm.bin
host.domain# ln -s /usr/ucb/vacation vacation
d117 1
a117 1
Typically, the program mailer is defined by a single line in the 
d119 1
a119 1
found in the /etc, /usr/lib or /etc/mail directories, depending on 
d126 3
a128 3
In order to configure sendmail to use smrsh, you must modify the Mprog 
definition in the sendmail.cf file, by replacing the /bin/sh specification 
with /usr/local/etc/smrsh.
d136 2
a137 2
Mprog,	P=/usr/local/etc/smrsh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u
          ^^^^^^^^^^^^^^^^^^^^
d143 1
a143 1
Mprog,		P=/usr/local/etc/smrsh, F=lsDFM, A=sh -c $u
d146 1
a146 1
After modifying the Mprog definition in the sendmail.cf file, if a frozen 
d154 1
a154 1
host.domain# /usr/lib/sendmail -bz
d156 1
a156 1
Now re-start the sendmail process.  An example of how to do this on 
d158 9
a166 5
 
host.domain# /usr/bin/ps aux | /usr/bin/grep sendmail
root 130  0.0  0.0  168    0 ?  IW   Oct  2  0:10 /usr/lib/sendmail -bd -q
host.domain# /bin/kill -9 130
host.domain# /usr/lib/sendmail -bd -q30m
@


1.1.1.1
log
@Import sendmail-8.9.1 (slightly trimmed) onto a fresh branch under
src/contrib as per various discussions.  I will copy across our changes
and then point the Makefiles across once the dust has settled..
@
text
@@


1.1.1.2
log
@Import sendmail-8.9.2 onto vendor branch  (update from 8.9.1)

Obtained from: ftp.sendamil.org
@
text
@d6 1
a6 1
	@@(#)README	8.2	11/11/1995
@


1.1.1.2.6.1
log
@MFC: Import of sendmail 8.11.0.
     Includes: moving /etc/aliases to /etc/mail/aliases, removing outdated
               documentation, and updating freebsd.mc for new syntax.
@
text
@d2 2
d6 3
d10 1
a10 1
Software Engineering Institute, Carnegie Mellon University.  This file is
d26 1
a26 1
smrsh has been written with portability in mind, and uses traditional
a29 1
smrsh should build on most systems with the enclosed Build script:
a30 1
	host.domain% sh Build
d32 1
a32 1
To compile smrsh.c by hand, use the following command:
d34 1
a34 1
	host.domain% cc -o smrsh smrsh.c
d40 1
a40 9
	host.domain% cc -Bstatic -o smrsh smrsh.c
		or
	host.domain% sh Build LDOPTS=-Bstatic

With gcc, the GNU C compiler, use the -static option.

	host.domain% cc -static -o smrsh smrsh.c
		or
	host.domain% sh Build LDOPTS=-static
d43 2
d46 1
a46 1
As root, install smrsh in /usr/libexec.  Using the Build script:
d48 2
a49 7
	host.domain# sh Build install

For manual installation: install smrsh in the /usr/libexec
directory, with mode 511.

	host.domain# mv smrsh /usr/libexec
	host.domain# chmod 511 /usr/libexec/smrsh
d56 2
a57 2
   1.  examining your /etc/mail/aliases file, to indicate what commands
       are being used by the system.
d59 2
a60 2
   2.  surveying your host's .forward files, to determine what
       commands users have specified.
d62 2
a63 2
See the man page for aliases(5) if you are unfamiliar with the format of
these specifications. Additionally, you should include in the list,
d67 1
a67 1
perl(1), uudecode(1) or the stream editor sed(1) in your list of
d71 1
a71 1
You will next need to create the directory /usr/adm/sm.bin and populate
d86 1
a86 1
To allow the popular vacation(1) program by creating a link in the
d89 2
a90 2
	host.domain# cd /usr/adm/sm.bin
	host.domain# ln -s /usr/ucb/vacation vacation
d99 1
a99 1
Typically, the program mailer is defined by a single line in the
d101 1
a101 1
found in the /etc, /usr/lib or /etc/mail directories, depending on
d108 3
a110 3
In order to configure sendmail to use smrsh, you must modify the Mprog
definition in the sendmail.cf file, by replacing the /bin/sh specification
with /usr/libexec/smrsh.
d118 2
a119 2
Mprog,	P=/usr/libexec/smrsh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u
          ^^^^^^^^^^^^^^^^^^
d125 1
a125 1
Mprog,		P=/usr/libexec/smrsh, F=lsDFM, A=sh -c $u
d128 1
a128 1
After modifying the Mprog definition in the sendmail.cf file, if a frozen
d136 1
a136 1
	host.domain# /usr/lib/sendmail -bz
d138 1
a138 1
Now re-start the sendmail process.  An example of how to do this on
d140 5
a144 9

	host.domain# cat /var/run/sendmail.pid
	130
	/usr/sbin/sendmail -bd -q30m
	host.domain# /bin/kill -15 130
	host.domain# /usr/sbin/sendmail -bd -q30m


$Revision: 8.6 $, Last updated $Date: 1999/04/28 01:09:51 $
@


1.1.1.2.6.2
log
@MFC: Import sendmail 8.11.2
@
text
@d78 2
a79 2
If your platform doesn't have a default CMDDIR setting, you will
next need to create the directory /usr/adm/sm.bin and populate
d156 1
a156 1
$Revision: 8.6.16.1 $, Last updated $Date: 2000/10/09 20:39:55 $
@


1.1.1.2.6.3
log
@MFC: Import sendmail 8.12.2
MFC: Resolve conflicts from sendmail 8.12.2 import
MFC: Remove files no longer part of the sendmail 8.12.2 distribution.
MFC: Fix mail.local build for non-sendmail.org code (1.15)
@
text
@d78 1
a78 1
If your platform doesn't have a default SMRSH_CMDDIR setting, you will
d156 1
a156 1
$Revision: 8.8 $, Last updated $Date: 2001/01/24 00:05:58 $
@


1.1.1.2.6.4
log
@MFC: sendmail 8.12.10 (note that parts of 8.12.10 were MFC'ed prior to
FreeBSD 4.9-RELEASE)
@
text
@a46 2
The following C defines can be set defined to change the search path and
the bin directory used by smrsh.
a47 8
-DSMRSH_PATH=\"path\"	\"/bin:/usr/bin:/usr/ucb\"	The default search
							path.
-DSMRSH_CMDDIR=\"dir\"	\"/usr/adm/sm.bin\"		The default smrsh
							program directory
 
These can be added to the devtools/Site/site.config.m4 file using the
global M4 macro confENVDEF or the smrsh specific M4 macro
conf_smrsh_ENVDEF.
d156 1
a156 1
$Revision: 8.8.4.1 $, Last updated $Date: 2003/05/26 04:29:42 $
@


1.1.1.2.6.5
log
@MFC: sendmail 8.13.1 import and related changes
@
text
@d166 1
a166 1
$Revision: 8.9 $, Last updated $Date: 2003/05/26 04:30:58 $
@


1.1.1.3
log
@Import of sendmail version 8.11.0 into vendor branch SENDMAIL with
release tag v8_11_0.

Obtained from: ftp://ftp.sendmail.org/pub/sendmail/
@
text
@d2 2
d6 3
d10 1
a10 1
Software Engineering Institute, Carnegie Mellon University.  This file is
d26 1
a26 1
smrsh has been written with portability in mind, and uses traditional
a29 1
smrsh should build on most systems with the enclosed Build script:
a30 1
	host.domain% sh Build
d32 1
a32 1
To compile smrsh.c by hand, use the following command:
d34 1
a34 1
	host.domain% cc -o smrsh smrsh.c
d40 1
a40 9
	host.domain% cc -Bstatic -o smrsh smrsh.c
		or
	host.domain% sh Build LDOPTS=-Bstatic

With gcc, the GNU C compiler, use the -static option.

	host.domain% cc -static -o smrsh smrsh.c
		or
	host.domain% sh Build LDOPTS=-static
d43 2
d46 1
a46 1
As root, install smrsh in /usr/libexec.  Using the Build script:
d48 2
a49 7
	host.domain# sh Build install

For manual installation: install smrsh in the /usr/libexec
directory, with mode 511.

	host.domain# mv smrsh /usr/libexec
	host.domain# chmod 511 /usr/libexec/smrsh
d56 2
a57 2
   1.  examining your /etc/mail/aliases file, to indicate what commands
       are being used by the system.
d59 2
a60 2
   2.  surveying your host's .forward files, to determine what
       commands users have specified.
d62 2
a63 2
See the man page for aliases(5) if you are unfamiliar with the format of
these specifications. Additionally, you should include in the list,
d67 1
a67 1
perl(1), uudecode(1) or the stream editor sed(1) in your list of
d71 1
a71 1
You will next need to create the directory /usr/adm/sm.bin and populate
d86 1
a86 1
To allow the popular vacation(1) program by creating a link in the
d89 2
a90 2
	host.domain# cd /usr/adm/sm.bin
	host.domain# ln -s /usr/ucb/vacation vacation
d99 1
a99 1
Typically, the program mailer is defined by a single line in the
d101 1
a101 1
found in the /etc, /usr/lib or /etc/mail directories, depending on
d108 3
a110 3
In order to configure sendmail to use smrsh, you must modify the Mprog
definition in the sendmail.cf file, by replacing the /bin/sh specification
with /usr/libexec/smrsh.
d118 2
a119 2
Mprog,	P=/usr/libexec/smrsh,   F=lsDFMeuP,  S=10, R=20, A=sh -c $u
          ^^^^^^^^^^^^^^^^^^
d125 1
a125 1
Mprog,		P=/usr/libexec/smrsh, F=lsDFM, A=sh -c $u
d128 1
a128 1
After modifying the Mprog definition in the sendmail.cf file, if a frozen
d136 1
a136 1
	host.domain# /usr/lib/sendmail -bz
d138 1
a138 1
Now re-start the sendmail process.  An example of how to do this on
d140 5
a144 9

	host.domain# cat /var/run/sendmail.pid
	130
	/usr/sbin/sendmail -bd -q30m
	host.domain# /bin/kill -15 130
	host.domain# /usr/sbin/sendmail -bd -q30m


$Revision: 8.6 $, Last updated $Date: 1999/04/28 01:09:51 $
@


1.1.1.4
log
@Import sendmail 8.11.2
@
text
@d78 2
a79 2
If your platform doesn't have a default CMDDIR setting, you will
next need to create the directory /usr/adm/sm.bin and populate
d156 1
a156 1
$Revision: 8.6.16.1 $, Last updated $Date: 2000/10/09 20:39:55 $
@


1.1.1.5
log
@Import sendmail 8.12.2
@
text
@d78 1
a78 1
If your platform doesn't have a default SMRSH_CMDDIR setting, you will
d156 1
a156 1
$Revision: 8.8 $, Last updated $Date: 2001/01/24 00:05:58 $
@


1.1.1.6
log
@Import of post-8.12.3 bug fixes from vendor repository.

These are being imported for the upcoming FreeBSD 4.6 release.
@
text
@d156 1
a156 1
$Revision: 1.1.1.5 $, Last updated $Date: 2002/02/17 21:56:43 $
@


1.1.1.7
log
@Import sendmail 8.12.4
@
text
@d156 1
a156 1
$Revision: 8.8 $, Last updated $Date: 2001/01/24 00:05:58 $
@


1.1.1.8
log
@Import sendmail 8.12.10
@
text
@a46 2
The following C defines can be set defined to change the search path and
the bin directory used by smrsh.
a47 8
-DSMRSH_PATH=\"path\"	\"/bin:/usr/bin:/usr/ucb\"	The default search
							path.
-DSMRSH_CMDDIR=\"dir\"	\"/usr/adm/sm.bin\"		The default smrsh
							program directory
 
These can be added to the devtools/Site/site.config.m4 file using the
global M4 macro confENVDEF or the smrsh specific M4 macro
conf_smrsh_ENVDEF.
d156 1
a156 1
$Revision: 8.8.4.1 $, Last updated $Date: 2003/05/26 04:29:42 $
@


1.1.1.9
log
@Import sendmail 8.13.1
@
text
@d166 1
a166 1
$Revision: 8.9 $, Last updated $Date: 2003/05/26 04:30:58 $
@


1.1.1.9.8.1
log
@SVN rev 182466 on 2008-08-30 00:21:55Z by gshapiro

MFC: sendmail 8.14.3

Approved by:	re
@
text
@d27 1
a27 1
	host.domain% sh ./Build
d39 1
a39 1
	host.domain% sh ./Build LDOPTS=-Bstatic
d45 1
a45 1
	host.domain% sh ./Build LDOPTS=-static
d61 1
a61 1
	host.domain# sh ./Build install
d166 1
a166 1
$Revision: 8.10 $, Last updated $Date: 2008/02/12 16:40:06 $
@


1.1.1.9.18.1
log
@SVN rev 182465 on 2008-08-30 00:20:49Z by gshapiro

MFC: sendmail 8.14.3

Approved by:	re
@
text
@d27 1
a27 1
	host.domain% sh ./Build
d39 1
a39 1
	host.domain% sh ./Build LDOPTS=-Bstatic
d45 1
a45 1
	host.domain% sh ./Build LDOPTS=-static
d61 1
a61 1
	host.domain# sh ./Build install
d166 1
a166 1
$Revision: 8.10 $, Last updated $Date: 2008/02/12 16:40:06 $
@


