In response to Vadim Vygonets:
> For security reasons (too many
> setuid binaries), I would also advise you to "chmod 000
> /usr/libexec/sendmail/sendmail" or just delete it -- it would be
> enough to eliminate all traces of it.
Of course I do that!
> > I also
> > never know exactly what people might put in their scripts -- a direct
> > call to mailwrapper would be silly but I am sure someone, somehwere,
> > has done it.
>
> There's but one problem: mailwrapper looks at argv[0] to decide
> what program to run.
Oh, I've never bothered to look at what these things actually _do_ --
I just delete them _all_ and replace them with sym-links to Exim!
It's quicker than investigating. Everything then works fine.