Boy do I feel silly ...
AFter reading your post I decided to hash out that option in sendmail.cf and
check everything again, and sure enuf, /home was set to group-writable. I am
an idiot.
I should have caught it the first time around. Obviously the lesson is,
check every point in the path! (DUH)
Many thanks, Michael --
- Pat
> -----Original Message-----
> From: majordomo-users-owner@GreatCircle.COM
> [mailto:majordomo-users-owner@GreatCircle.COM]On Behalf Of Michael
> Talbot-Wilson
> Sent: Friday, October 30, 1998 7:10 PM
> To: majordomo-users@GreatCircle.COM
> Subject: RE: Error from the list, Please help
>
>
> On Fri, 30 Oct 1998, Patrick Holloway wrote:
>
> > I had the same problem with my lists after installing procmail
> on my mailer
> > box. I'm not sure why, but sendmail seemed to be rather more
> paranoid than
> > usual ...
>
> You probably installed a later version of sendmail, too.
>
> >
> > I unsuccessfully diddled permissions and ownerships and the
> like for hours
>
> Funny... if you had diddled the exact permissions mentioned in the
> message the problem should have been fixed.
>
> > before hitting AltaVista. I don't recall where I found the info
> but it's not
> > in the Bat Book. (I'm using sendmail v. 8.9.0)
>
> I thought so.
>
> > What did it for me was setting the following option in my sendmail.cf:
> >
> > O DontBlameSendmail=forwardfileinunsafedirpath
> >
> > To everyone else, if there's a better way of fixing this, I'd
> love to hear
> > about it.
>
> Why not just avoid putting the forward file in an unsafe dir path?
>
> > > The original message was received at Thu, 29 Oct 1998 13:20:45 +0800
> > > from daemon@localhost
> > >
> > > ----- The following addresses had permanent fatal errors -----
> > > seanat-list
> > > :include:/users/majordomo/lists/seanat
> > > (expanded from: seanat-list)
> > >
> > > ----- Transcript of session follows -----
> > > 550 :include:/users/majordomo/lists/seanat... Cannot open
> > > /users/majordomo/lists/seanat: Group writable directory
> > > 554 seanat-list... aliasing/forwarding loop broken
>
> That is a pretty clear message.
>
> Make sure the :include: file (seanat) is not group-writeable, and
> that the directories in its path are not.
>
> A group-writeable forward file is insecure, and sendmail checks that
> and protects you from your carelessness or ignorance. If you want
> to defeat the check, you can, as indicated above, but it is surely
> more sensible to fix the problem that sendmail has detected.
>
>
>
|
|
