I have a number of scripts that use the unix mail command (/usr/bin/mail, not the mail.app program) to send me messages when something interesting happens. These stopped working after I upgraded to 10.1.5 since the mail command failed with the message
can not chdir(/var/spool/clientmqueue/): Permission deniedIt turns out that the new version of sendmail in 10.1.5 has improved security and some of the files and directories in 10.1.5 don't have quite the right mode for sendmail to work right as a submission program, although it still works ok (I think) as a daemon.
Program mode requires special privileges, e.g., root or TrustedUser.
I found a page on the sendmail.org web site that explained what had changed and how the modes should be set. In brief, the files and directories that matter and the desired modes are
-r-xr-sr-x root smmsp ... /PATH/TO/sendmailOn my machine they were set as:
drwxrwx--- smmsp smmsp ... /var/spool/clientmqueue
drwx------ root wheel ... /var/spool/mqueue
-r--r--r-- root wheel ... /etc/mail/sendmail.cf
-r--r--r-- root wheel ... /etc/mail/submit.cf
-r-sr-xr-x root smmsp ... /usr/sbin/sendmailI think the important one that kept things from working was the incorrect owner and group for clientmqueue, but I fixed the others too. After that the mail command, as in
drwxrwx--- root wheel ... /var/spool/clientmqueue
drwxr-x--- root wheel ... /var/spool/mqueue/
-rw-r--r-- root wheel ... /etc/mail/sendmail.cf
-r--r--r-- root bin ... /etc/mail/submit.cf
mail -s "Some subject" me@my.hostworks again.
message text
^D

