smctrl /usr/sbin/sendmail hardcoded !

[dtouzeau]

Dear

For compatibilities purpose we have created a dedicated SendMail instance located in /home/openemm/sendmail/sbin/sendmail

But the smctrl have hardcoded the following files

/usr/sbin/sendmail
/etc/init.d/sendmail

Is it possible to specifiy an another path for these files in order to make it works ?

[maschoff]

smctrl runs setuid root which can be a potential security risk. But to allow the configuration of the paths for the executable sendmail files is a much higher security risk. We would suggest instead an external configuration file
a) in a directory which can only be written by root (like /etc) and
b) which can only read and written by root.
Then, smctrl could be enhanced that it reads the path from the config file only if a) and b) are true.