diff options
Diffstat (limited to 'release')
-rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.sgml | 13 | ||||
-rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/common/new.sgml | 13 |
2 files changed, 26 insertions, 0 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 35f65cc..040acff 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting> <programlisting>sendmail_enable="YES"</programlisting> + <para>The permissions for <application>sendmail</application> + alias and map databases built via + <filename>/etc/mail/Makefile</filename> now default to mode + 0640 to protect against a file locking local denial of service. + It can be changed by setting the new + <varname>SENDMAIL_MAP_PERMS</varname> + <filename>make.conf</filename> option. &merged;</para> + + <para>The permissions for the <application>sendmail</application> + statistics file, <filename>/var/log/sendmail.st</filename>, have + been changed from mode 0644 to mode 0640 to protect against + a file locking local denial of service. &merged;</para> + </sect4> </sect3> diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index 35f65cc..040acff 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting> <programlisting>sendmail_enable="YES"</programlisting> + <para>The permissions for <application>sendmail</application> + alias and map databases built via + <filename>/etc/mail/Makefile</filename> now default to mode + 0640 to protect against a file locking local denial of service. + It can be changed by setting the new + <varname>SENDMAIL_MAP_PERMS</varname> + <filename>make.conf</filename> option. &merged;</para> + + <para>The permissions for the <application>sendmail</application> + statistics file, <filename>/var/log/sendmail.st</filename>, have + been changed from mode 0644 to mode 0640 to protect against + a file locking local denial of service. &merged;</para> + </sect4> </sect3> |