Description of problem:
As per the recent spate of Cert Advisories I upgraded the sendmail on out
systems using the Redhat Sendmail RPM.
In the process, sendmail just over wrote the /etc/mail/Makefile without
checking for local modifications. We heavily modifide this file to allow
us to install aliases, access and genertable items from a multiple-machine
database. After patching it too a few days before the over-write was
and had to require a restoration from backups to recover our Makefile.
Version-Release number of selected component (if applicable):
sendmail-8.11.6-23.72 A widely used Mail Transport Agent (MTA).
sendmail-cf-8.11.6-23.72 The files needed to reconfigure Sendmail.
Presumabily for all sendmail RPM's
Steps to Reproduce:
1. Modify /etc/mail/Makefile
2. Force a freasen of the sendmail rpm installation
3. Makfile modification is gone!
No warning, file is just over written
The file /etc/mail/Mailfile should not have been over writen, instead the
installed version should have been placed in a ".rpmnew" and a warning issued
just as RPM's do for other files (like sendmail.mc and sendmail.cf)
The sendmail src.rpm has this correctly marked as %config file,
so this should be ok.
Florian La Roche