sendmail 8.13 Companion

A Useful Table

Table 10-1 shows recommended permissions and ownerships.

Recommended Permissions

Table 10-1 shows the recommended ownerships and permissions for all the files and directories in the sendmail system. The path components will vary depending on the vendor version of sendmail you are running. For example, while we might show the /usr/sbin/sendmail path, your site might use /usr/lib/sendmail, or even /usr/lib/mail/sendmail.

In the “Owner” column of Table 10-1, the owner is indicated with a root, a T, an R, or some combination thereof. A T means the owner can be the user listed with the TrustedUser option (24.9.112^[3ed]). An R means the owner must be the one specified by the RunAsUser option (24.9.94^[3ed]) if that option was specified. We show :group when the group is important.

Table 10-1. Recommended permissions for V8.12 and above

Path	Type	Owner	Octal mode	ls(1) mode
/	Directory	root	0755	drwxr-xr-x
/usr	Directory	root	0755	drwxr-xr-x
/usr/sbin[a]	Directory	root	0755	drwxr-xr-x
/usr/sbin/sendmail	File	root:smmsp	2555	-r-xr-sr-x [b]
/etc	Directory	root	0755	drwxr-xr-x
/etc/mail	Directory	root,T	0755	drwxr-xr-x
/etc/mail/sendmail.cf	File	root,T	0644 or 0640	-rw-r--r--
/etc/mail/statistics	File	root,T,R	0600	-rw-------
/etc/mail/helpfile	File	root,T	0444	-r--r--r--
/etc/mail/aliases	File	root,T	0640	-rw-r-----
/etc/mail/aliases.pag	File	root,T,R	0640	-rw-r-----
/etc/mail/aliases.dir ...