/*
 * It is possible to configure sendmail to work properly without root 
 * privileges and without capsel. Use your mind instead of this !
 */

/usr/sbin/sendmail {
	uid 8
	gid 12
	groups no

	chkchroot yes
	chksetuid no
	clrenv yes
	rootdir default

	cap set empty
	cap effective set {
		bind
	}
	
	bindtcp 25		/* smtp 25/tcp mail */
	
	uidcap default
	
	exec allow {
		/usr/sbin/sendmail
		/usr/bin/procmail
	}
}
