FEATURE(smrsh)

Use smrsh (sendmail restricted shell) V8.7 and later

Although sendmail tries to be very safe about how it runs programs from the aliases(5) and ~/.forward files (Delivery Via Programs on page 468), it still can be vulnerable to some internal attacks. To limit the selection of programs that sendmail is allowed to run, V8 sendmail includes source and documentation for the smrsh (sendmail restricted shell) program. See The smrsh Program on page 379 for a full description of the smrsh program.

Get sendmail, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.