Re: Headers and footers not appearing on list messages

Kenneth G. Gordon wrote:
> I think the following has something to do with sendmail's security features, 
> but am not sure:
> 
> In the $list.config files for some of my lists, there are both headers and 
> footers that are intended to be included in each e-mail.
> 
> However, if I set ALL files in the majordomo/lists director to mode 644, 
> neither the header nor the footer appears on any list message.

Are you sure they are not in the message?  Or are they hidden by MIME/HTML
message bodies?  CTRL-U in netscape/mozilla/thunderbird to see pieces of the
message hidden by the client.  I am not sure of equivalent outlook/eudora/other
clients keys, but they do have this ability too.

> 
> The above leads me to believe that the $list.config files are not even being 
> used at all with the present mode.

This depends on the answer to the above, and whether "resend" is being used
on the alias that directs messages for your list.

> 
> Shouldn't some of those files be executable?

ABSOLUTELY NOT!!!

> 
> Which ones? Executable by whom?

None.  The only executables are in/under your majordomo $HOME directory.
My *.config files are 660 and my lists are 644.  My list, digest, and
archive directories are all 750.  Then again, my majordomo user has it's
own group, and mail is a member of majordomo and majordomo is trusted.

> 
> If I do not set at least the $list file to mode 644, I get an error message from 
> sendmail that the file is group writeable and it won't read it.

Sendmail security can be reduced to allow group writable files, but this is not
necessary either.  As this is not in majordomo's control, but sendmail's, I offer;

http://www.sendmail.org/tips/dontBlameSendmail

> 
> Thus, none of the list administrators can edit their $list files unless they su 
> majordom, or unless I make all the files associated with a particular list 
> owned by the list administrator.

Incorrect!  Admins do not have to manipulate the files locally, or even have a
login on your majordomo/sendmail server.  Lists and their configs can be managed
remotely through email commands to majordomo.  To add or remove addresses from a
list, they simply send one line for each command in the body of a message to your
majordomo alias.

approve list-password [un]subscribe listname email@address
approve list-password [un]subscribe listname [email protected]

The above method means list owners do not need permission to manipulate files in
the majordomo lists directory, as majordomo is the user making changes.

[approve list-password] who listname
will retrieve the entire subscriber file

SEE ALSO:
config listname list-password
newconfig listname list-password
writeconfig listname list-password

> 
> The first method has, to my mind, security issues. The second is somewhat 
> "unhandy" to root.
> 
> I have added majordom to the list of Trusted users in my sendmail.cf, which 
> allows sendmail to read the $list files at all, but what do I do about the other 
> files, especially the $list.config files?

Adding majordom as a Trusted user does not do what you describe above, but it
may seem like it.  A trusted user is one that sendmail will not issue warnings
about setting the from address to something other than it's own login name.  It
may have a side effect of trusting directories/files owned by that user as well.
You should really be following majordomo documentation for managing majordomo,
then if sendmail security is restricting your majordomo actions, you can relax
sendmail accordingly.

This might be helpful, with lots of good troubleshooting/debugging information;

http://www.greatcircle.com/majordomo/README

> 
> Solution(s)?
> 
> Ken Gordon