Bug 44757 - smrsh is useless with procmail as LDA
Summary: smrsh is useless with procmail as LDA
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: sendmail
Version: 7.1
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Florian La Roche
QA Contact: David Lawrence
Depends On:
TreeView+ depends on / blocked
Reported: 2001-06-16 03:51 UTC by Chris Adams
Modified: 2017-05-13 01:16 UTC (History)
0 users

Clone Of:
Last Closed: 2001-06-16 03:51:10 UTC

Attachments (Terms of Use)

Description Chris Adams 2001-06-16 03:51:06 UTC
As shipped, sendmail is configured to use procmail as the local delivery
agent.  It is also configured to use the sendmail restricted shell, smrsh,
for program deliveries.

Configuring smrsh when procmail is the LDA is pointless.  Any restrictions
that are set up with smrsh as to what programs users can run from their
.forward files can easily be circumvented with a .procmailrc as simple as

* .
| $HOME/someprogram

As long as procmail is the LDA, configuring sendmail to use smrsh is
nothing but an annoyance and cause for confusion for people not familiar
with smrsh.

Comment 1 Florian La Roche 2001-06-29 09:15:46 UTC
Providing smrsh allows to change the configuration to a more restrictive one
than shipped by default with Red Hat Linux. I think the current setup is ok,
but agree that this point could be added to some Red Hat README about sendmail.

Thanks for this report,

Florian La Roche

Comment 2 Chris Adams 2001-07-02 19:38:43 UTC
I'm not saying that smrsh shouldn't be provided, just that the default
sendmail.cf should not use smrsh since procmail is also used.  This can
be confusing and misleading (some may think that have more security than
they really do since smrsh is rendered useless by procmail).

Comment 3 openshift-github-bot 2017-05-13 01:16:21 UTC
Commit pushed to master at https://github.com/openshift/origin

UPSTREAM: 44760: Fix issue #44757: Flaky Test_AttachDetachControllerRecovery

Note You need to log in before you can comment on or make changes to this bug.