summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorgshapiro <gshapiro@FreeBSD.org>2002-05-24 15:50:34 +0000
committergshapiro <gshapiro@FreeBSD.org>2002-05-24 15:50:34 +0000
commit61c41bc60dd7ffc6c7cf2be27034b2b76261aca7 (patch)
tree6f608ba18b3e118c7794611c2162d57a588baaa3
parent5d0d03b327112d105d012708b2df2df23d38b959 (diff)
downloadFreeBSD-src-61c41bc60dd7ffc6c7cf2be27034b2b76261aca7.zip
FreeBSD-src-61c41bc60dd7ffc6c7cf2be27034b2b76261aca7.tar.gz
Add release notes for the changed file permissions on sendmail alias
and map databases as well as the statistics file. MFC after: 1 day pending RE approval
-rw-r--r--release/doc/en_US.ISO8859-1/relnotes/article.sgml13
-rw-r--r--release/doc/en_US.ISO8859-1/relnotes/common/new.sgml13
2 files changed, 26 insertions, 0 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
index 35f65cc..040acff 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
@@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
<programlisting>sendmail_enable="YES"</programlisting>
+ <para>The permissions for <application>sendmail</application>
+ alias and map databases built via
+ <filename>/etc/mail/Makefile</filename> now default to mode
+ 0640 to protect against a file locking local denial of service.
+ It can be changed by setting the new
+ <varname>SENDMAIL_MAP_PERMS</varname>
+ <filename>make.conf</filename> option. &merged;</para>
+
+ <para>The permissions for the <application>sendmail</application>
+ statistics file, <filename>/var/log/sendmail.st</filename>, have
+ been changed from mode 0644 to mode 0640 to protect against
+ a file locking local denial of service. &merged;</para>
+
</sect4>
</sect3>
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index 35f65cc..040acff 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
<programlisting>sendmail_enable="YES"</programlisting>
+ <para>The permissions for <application>sendmail</application>
+ alias and map databases built via
+ <filename>/etc/mail/Makefile</filename> now default to mode
+ 0640 to protect against a file locking local denial of service.
+ It can be changed by setting the new
+ <varname>SENDMAIL_MAP_PERMS</varname>
+ <filename>make.conf</filename> option. &merged;</para>
+
+ <para>The permissions for the <application>sendmail</application>
+ statistics file, <filename>/var/log/sendmail.st</filename>, have
+ been changed from mode 0644 to mode 0640 to protect against
+ a file locking local denial of service. &merged;</para>
+
</sect4>
</sect3>
OpenPOWER on IntegriCloud