Add --disable-root-mailer option to run the mailer as the user and not root.

diff --git a/INSTALL b/INSTALL
index 42db5fdef152376c1b22fb41558e26871c979e82..3017edb16538d1182b0702a4faf3b588227d29fe 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -204,6 +204,12 @@ Special features/options:
         If you don't have /usr/include/bsd_auth.h then you cannot
         use this.
 
+  --disable-root-mailer
+        By default sudo will run the mailer as root when tattling
+        on a user so as to prevent that user from killing the mailer.
+        With this option, sudo will run the mailer as the invoking
+        user which some people consider to be safer.
+
   --disable-saved-ids
        Disable use of POSIX saved IDs.  Normally, sudo will try to
        use POSIX saved IDs if they are supported.  However, some

diff --git a/config.h.in b/config.h.in
index 9bc70c59dd7ed6742a7fc4eb220ab17714758f71..cb873359bb04206b0ed4b66c46c86e3edb67f12b 100644 (file)
--- a/config.h.in
+++ b/config.h.in
@@ -355,6 +355,9 @@
    */
 #undef NO_LECTURE
 
+/* Define to avoid runing the mailer as root. */
+#undef NO_ROOT_MAILER
+
 /* Define if root should not be allowed to use sudo. */
 #undef NO_ROOT_SUDO
 

diff --git a/configure.in b/configure.in
index 7d73a70bd880b76aea94efb7d75532a62de1a337..7bf7d5b305b522110dcc37ff93e6ad48aac8bc96 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -964,9 +964,24 @@ AC_ARG_ENABLE(authentication,
   esac
 ], AC_MSG_RESULT(yes))
 
+AC_MSG_CHECKING(whether to disable running the mailer as root)
+AC_ARG_ENABLE(root-mailer,
+[  --disable-root-mailer   Don't run the mailer as root, run as the user],
+[ case "$enableval" in
+    yes)       AC_MSG_RESULT(no)
+               ;;
+    no)                AC_MSG_RESULT(yes)
+               AC_DEFINE(NO_ROOT_MAILER, 1, [Define to avoid runing the mailer as root.])
+               ;;
+    *)         AC_MSG_RESULT(no)
+               echo "Ignoring unknown argument to --enable-root-mailer: $enableval"
+               ;;
+  esac
+], AC_MSG_RESULT(no))
+
 AC_MSG_CHECKING(whether to disable use of POSIX saved ids)
 AC_ARG_ENABLE(saved-ids,
-[  --saved-ids             Don't try to use POSIX saved ids],
+[  --disable-saved-ids     Don't try to use POSIX saved ids],
 [ case "$enableval" in
     yes)       AC_MSG_RESULT(no)
                ;;
@@ -996,7 +1011,7 @@ AC_ARG_ENABLE(shadow,
 
 AC_MSG_CHECKING(whether root should be allowed to use sudo)
 AC_ARG_ENABLE(root-sudo,
-[  --disable-root-sudo     don't allow root to run sudo],
+[  --disable-root-sudo     Don't allow root to run sudo],
 [ case "$enableval" in  
     yes)       AC_MSG_RESULT(yes)
                ;;