You could have just done:
chmod u-s `which sendmail`
which would have removed the setuid bit.

It might be a security risk to have sendmail owned by "nobody", as that
is usually (pre 7.2 at least) what apache runs as, and is sometimes used
for guest users (like with samba)

Buchan

Praedor Tempus wrote:
> 
> Daniel Woods wrote:
> >
> > > If I send mail as a user, I always get this message:
> > >
> > > send-mail: warning: sendmail is set-uid root, or is run from a set-uid root
> > > process
> > >
> > > First off, I do not have sendmail installed, it is postfix, but nevertheless
> > > I would like to eliminate this problem/message.  How do I do this?  Who
> > > should own/run the mail program if not root ? By this I mean if I am to
> > > remove root uid, to whom to I change it?  Daemon?
> >
> > I use postfix and I have the following setting...
> >
> > -rwxr-xr-x    1 root     root        64284 Oct  3 12:16 /usr/sbin/sendmail
> >
> > Works fine for and no errors reported.
> 
> As soon as I changed the owner from root to "nobody" and left the group
> at
> "mail", the problems vanished.  Leaving it as you have it always
> produced the
> warning message about set-uid root.
> 
> praedor
> 
>   ------------------------------------------------------------------------
> Keep in touch with http://mandrakeforum.com:
> Subscribe the "[EMAIL PROTECTED]" mailing list.

-- 
|--------------------------------------------------------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone                                           +27824722231
email                               mailto:[EMAIL PROTECTED]
Centre for Automotive Engineering           http://www.cae.co.za
South Africas first satellite:        http://sunsat.ee.sun.ac.za
Control Models                          http://www.control.co.za
|----------------Registered Linux User #182071-----------------|

Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.

Reply via email to