Red Hat Bugzilla – Bug 29367
sendmail overwrites existing sendmail.cf
Last modified: 2005-10-31 17:00:50 EST
It does not do even an rpmsave on the original sendmail.cf Additionally it has that horrible daemon port ip address set to lo/127.0.0.1 This will catch many unwary people who will see sendmail running and wonder why they get deferred/connection refused.
We need to reproduce this behavior locally to understand more about it; e.g., modify the config file, upgrade the RPM and verify that it's not making an .rpmsave file for sendmail.cf...
This defect is considered MUST-FIX for Florence Gold release
changed to be %config(noreplace) in 8.11.2-12 and later.
In 8.11.3 it is still/again %config /etc/sendmail.cf
I am changing the priority of this bug to High. I don't understand why it has languished, unfixed, for a month, when Glen has already indicated that it is a must-fix bug, and when it is so easy to fix.
We have discussed this issue for some time internally and it is best for customers updating from earlier releases to get a current sendmail.cf written instead of keeping too old versions or keeping insecure versions. I understand this is bad for mail servers. Next round of changes can be done for sendmail 8.12 or newer to have a good start with then working updates. Florian La Roche
Sorry, but I am running sendmail in an workstation-setup also and the default sendmail.cf is not working for me: - I am behind a firewall. Therefore there must be used a SMART_HOST/null_client whose value can not be generalized - I have to use a GENERICS_DOMAIN which can not be generalized - Red Hat has set FEATURE(`accept_unresolvable_domains'). This is not acceptable here These are only a few issues, but at least the first two are probably occuring in a lot/the most of real-worl installations, especially in firms. The current practice makes only a few people happy running the default RH configuration. For the other ones it's annoying to have a non-working mail-server with more relaxed security settings, which is spewing messages about non-delivered messages aroung. To make a clean update of older versions why don't destroy^Woverride sendmail.cf in the %post step? ---------- [untested] ------------ %post echo '$Z' | /usr/lib/sendmail -bt | grep -q '^> 8.11' || %{__cp} %{_docdir}/sendmail/sendmail-rh.cf %{_sysconfdir}/sendmail.cf ----------------------------------
sendmail is now changed to %config(noreplace), so that updates can be installed without overwriting sendmail.cf. Please bugzilla if you think other options should be changed in the default .mc file. Thanks, Florian La Roche