Section 12.5.1

Only root and users listed with the TrustedUser option (TrustedUser) are allowed to rebuild the aliases database (V8.10 and later).

Section 12.5.4

The AutoRebuildAliases option (AutoRebuildAliases) has been removed as of V8.12 sendmail, and the aliases database can no longer be automatically rebuilt.