Age | Commit message (Collapse) | Author |
|
|
|
A potential security problem has been uncovered in 8.12.0 which might
be exploited locally by malicious users to gain access to the client
mail queue. However, as long as the MTA accepts local connections,
the possible consequences of this potential local exploit are small.
Notice: some operating systems don't provide a way to completely drop
privileges from a set-group-ID program. In that case sendmail refuses
to run if unsafe options are given.
|
|
|
|
contains bug fixes for problems found after 8.11.2 was released.
Systems which use buffered file I/O (like OpenBSD) were not properly
fsync()'ing the data (df) file. Although there is little chance
of data loss, this is an important fix.
|
|
|
|
and use ENVDEF= in the Makefile (this was reversed). Also, pull
in the right Makefile.inc for things that don't get installed
in usr.sbin.
|
|
|
|
praliases should be in section 1, not 8
Use arc4random(3) instead of random(3)
Add some sample OpenBSD .mc files
|
|
|