The install phase of the build executes the command "make DESTDIR=$RPM_BUILD_ROOT install -C src/$OBJDIR". This attempts to set owner and group on a file in the RPM_BUILD_ROOT, which is not permitted for an ordinary user. Setting owner and group should be done by an %attr directive in the files list. I would prefer to build SRPMS without root privilege, as I don't want to kill my production system with a bug in a spec file. I would suggest that all Red Hat SRPMS be test-built by a lowly user to verify that root privilige is not needed.
This bug was originally submitted with the component set to "sendmail", as the sendmail-8.9.3-10.src.rpm package was the one where the problem was observed.This bug was originally submitted with the component set to "sendmail", as the sendmail-8.9.3-10.src.rpm package was the one where the problem was observed.
fixed in sendmail-8.9.3-13, in the next Raw Hide release.