O'Reilly logo

sendmail 8.13 Companion by Gregory Neil Shapiro, Claus Assmann, George Jansen, Bryan Costales

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

A Useful Table

Table 10-1 shows recommended permissions and ownerships.

Recommended Permissions

Table 10-1 shows the recommended ownerships and permissions for all the files and directories in the sendmail system. The path components will vary depending on the vendor version of sendmail you are running. For example, while we might show the /usr/sbin/sendmail path, your site might use /usr/lib/sendmail, or even /usr/lib/mail/sendmail.

In the “Owner” column of Table 10-1, the owner is indicated with a root, a T, an R, or some combination thereof. A T means the owner can be the user listed with the TrustedUser option (24.9.112[3ed]). An R means the owner must be the one specified by the RunAsUser option (24.9.94[3ed]) if that option was specified. We show :group when the group is important.

Table 10-1. Recommended permissions for V8.12 and above

Path

Type

Owner

Octal mode

ls(1) mode

/

Directory

root

0755

drwxr-xr-x

/usr

Directory

root

0755

drwxr-xr-x

/usr/sbin[a]

Directory

root

0755

drwxr-xr-x

/usr/sbin/sendmail

File

root:smmsp

2555

-r-xr-sr-x [b]

/etc

Directory

root

0755

drwxr-xr-x

/etc/mail

Directory

root,T

0755

drwxr-xr-x

/etc/mail/sendmail.cf

File

root,T

0644 or 0640

-rw-r--r--

/etc/mail/statistics

File

root,T,R

0600

-rw-------

/etc/mail/helpfile

File

root,T

0444

-r--r--r--

/etc/mail/aliases

File

root,T

0640

-rw-r-----

/etc/mail/aliases.pag

File

root,T,R

0640

-rw-r-----

/etc/mail/aliases.dir ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required