git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] hooks--update: new, required, config variable: hooks.envelopesender,

From
APAndy Parkins <andyparkins@gmail.com>
Date
Mar 23, 2007, 16:15 UTC
Message-ID
<200703231615.28350.andyparkins@gmail.com>
In-Reply-To
<87lkho6ky8.fsf@rho.meyering.net>
On Friday 2007 March 23 15:25, Jim Meyering wrote:
Show 15 quoted lines
> Andy Parkins <andyparkins@gmail.com> wrote:
> > On Friday 2007 March 23 13:29, Jim Meyering wrote:
> >> It works for me using the sendmail from sendmail, and I have tested
> >> this with the one from postfix, too.
> >
> > Is your user set as a trusted user for sendmail though?
>
> No.  There is no need for that.
>
> > As a normal user wouldn't be allowed to do it.
>
> You mean with exim's sendmail?
> sendmail -f alt-envelope-sender works just fine when run by a
> non-privileged user when it's Sendmail's sendmail or the one from Postfix.
> It's a shame if it doesn't work with exim's implementation.
Okay; I went and found a sendmail manpage:
"-fname       Sets the name of the ``from'' person (i.e., the sender of the
              mail).  -f can only be used by ``trusted'' users (normally
              root,  daemon, and network) or if the person you are trying to
              become is the same as the person you are."

Seems the same as exim to me. Perhaps your distribution sets it up to allow if for anyone?

> case.  FYI, the first case was to allow commit email to be sent from
> the GNU coreutils git repository in a vserver on savannah.gnu.org.
> The second was at work last night.
> Not the *final* recipient, of course.
> Some *internal* MX servers are very careful about sender addresses
> in outbound mail, verifying them before forwarding the message on.
Fair enough.
> Thanks for the explanation of how email works, but you may
> assume that I know a little more than the average hacker :-)

My apologies; I didn't mean to be patronising - I wrongly assumed you were just confused about who was authenticating whom.

So; in short: I don't have a good answer to offer you, and it seems that "-f" is working for you. However, I'm still not convinced that this is the correct thing to do in the default hook. My main gripe is still all these "trusted user" paragraphs in the MTA manual pages.

Andy
-- 
Dr Andy Parkins, M Eng (hons), MIET
andyparkins@gmail.com
Previous: Jim MeyeringNext: Jim Meyering
Message 7 of 10 in “hooks--update: new, required, config variable: hooks.envelopesender,”
  1. hooks--update: new, required, config variable: hooks.envelopesender,Jim Meyering, Mar 23, 2007
  2. Andy ParkinsMar 23, 2007
  3. Jim MeyeringMar 23, 2007
  4. Jakub NarebskiMar 23, 2007
  5. Andy ParkinsMar 23, 2007
  6. Jim MeyeringMar 23, 2007
  7. Andy ParkinsMar 23, 2007
  8. Jim MeyeringMar 24, 2007
  9. Andy ParkinsMar 24, 2007
  10. hooks--update: new, optional, config variable: hooks.envelopesenderJim Meyering, Mar 24, 2007

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.