diff --git a/etc/defaults/make.conf b/etc/defaults/make.conf
index cf35cb7e5e6..30b44fa7795 100644
--- a/etc/defaults/make.conf
+++ b/etc/defaults/make.conf
@@ -319,6 +319,12 @@ BDECFLAGS=	-W -Wall -ansi -pedantic -Wbad-function-cast -Wcast-align \
 #	SENDMAIL_LDFLAGS=-L/usr/local/lib
 #	SENDMAIL_LDADD=-lsasl
 #
+# Note: If you are using Cyrus SASL with other applications which require
+#	access to the sasldb file, you should add '-D_FFR_UNSAFE_SASL' to
+#	SENDMAIL_CFLAGS.  Also, add the following to your sendmail.mc file:
+#
+#	define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLFile')
+#
 #SENDMAIL_CFLAGS=
 #SENDMAIL_LDFLAGS=
 #SENDMAIL_LDADD=
diff --git a/share/examples/etc/make.conf b/share/examples/etc/make.conf
index cf35cb7e5e6..30b44fa7795 100644
--- a/share/examples/etc/make.conf
+++ b/share/examples/etc/make.conf
@@ -319,6 +319,12 @@ BDECFLAGS=	-W -Wall -ansi -pedantic -Wbad-function-cast -Wcast-align \
 #	SENDMAIL_LDFLAGS=-L/usr/local/lib
 #	SENDMAIL_LDADD=-lsasl
 #
+# Note: If you are using Cyrus SASL with other applications which require
+#	access to the sasldb file, you should add '-D_FFR_UNSAFE_SASL' to
+#	SENDMAIL_CFLAGS.  Also, add the following to your sendmail.mc file:
+#
+#	define(`confDONT_BLAME_SENDMAIL',`GroupReadableSASLFile')
+#
 #SENDMAIL_CFLAGS=
 #SENDMAIL_LDFLAGS=
 #SENDMAIL_LDADD=