You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Brandon Kuczenski <br...@301south.net> on 2005/04/27 00:53:51 UTC
spamd children run as root (again)
I've seen this question posted a couple times in the mailing list archives
(from October 2004) but no resolution. The question again:
I'm running SpamAssassin 3.0.2 on FreeBSD 4.10 in spamc/spamd format with
the '-u spamd' flag. Problem is, all the child processes are running as
root:
$ ps aux | grep spam
root 333 0.0 10.1 27636 25932 ?? I 11Apr05 1:03.83 spamd child (perl)
root 332 0.0 10.5 29020 27032 ?? I 11Apr05 1:07.96 spamd child (perl)
root 331 0.0 9.7 26544 24852 ?? I 11Apr05 0:52.68 spamd child (perl)
root 330 0.0 9.9 27152 25524 ?? I 11Apr05 1:04.40 spamd child (perl)
root 329 0.0 9.8 26864 25116 ?? I 11Apr05 0:58.08 spamd child (perl)
spamd 294 0.0 7.1 22392 18220 ?? Is 11Apr05 0:01.61 /usr/local/bin/spamd -d -c -u spamd -H /home/spamd -r /var/run/spamd.pid (perl)
$
Is this intended or is it a bug? The two threads I've seen that pertain
to it (both dating from Oct04) are left unresolved:
http://thread.gmane.org/gmane.mail.spam.spamassassin.general/57900
http://thread.gmane.org/gmane.mail.spam.spamassassin.general/58087
The practical consequence of this (aside from the unorthodoxy -- undesired
processes owned by root) is that the permissions of my
~user/.spamassassin/bayes_journal file get changed to root:spamd 0660.
I wanted them to be spamd:user 0660, so that the user can run
sa-learn without asking for root's help. Is that not the 'right way' to
do things?
Has there been a resolution to this question? If not, .. doesn't
everybody have this problem? Or is it not a problem? If not, why not?
-Brandon
Re: spamd children run as root (again)
Posted by Robert Blayzor <rb...@inoc.net>.
Brandon Kuczenski wrote:
> I've seen this question posted a couple times in the mailing list
> archives (from October 2004) but no resolution. The question again:
>
> I'm running SpamAssassin 3.0.2 on FreeBSD 4.10 in spamc/spamd format
> with the '-u spamd' flag. Problem is, all the child processes are
> running as root:
This has been a problem since 3.0.0 and I even submitted a patch in the
PR... Dunno why this PR is being ignored by the devs...
http://bugzilla.spamassassin.org/show_bug.cgi?id=3897
--
Robert Blayzor, BOFH
INOC, LLC
rblayzor\@(inoc.net|gmail.com)
PGP: http://www.inoc.net/~dev/
Key fingerprint = 1E02 DABE F989 BC03 3DF5 0E93 8D02 9D0B CB1A A7B0
"Pinky, you've left the lens cap of your mind on again."
- The Brain
Re: spamd children run as root (again)
Posted by Rick Macdougall <ri...@nougen.com>.
Brandon Kuczenski wrote:
> I've seen this question posted a couple times in the mailing list
> archives (from October 2004) but no resolution. The question again:
>
> I'm running SpamAssassin 3.0.2 on FreeBSD 4.10 in spamc/spamd format
> with the '-u spamd' flag. Problem is, all the child processes are
> running as root:
>
> $ ps aux | grep spam
> root 333 0.0 10.1 27636 25932 ?? I 11Apr05 1:03.83 spamd
> child (perl)
> root 332 0.0 10.5 29020 27032 ?? I 11Apr05 1:07.96 spamd
> child (perl)
> root 331 0.0 9.7 26544 24852 ?? I 11Apr05 0:52.68 spamd
> child (perl)
> root 330 0.0 9.9 27152 25524 ?? I 11Apr05 1:04.40 spamd
> child (perl)
> root 329 0.0 9.8 26864 25116 ?? I 11Apr05 0:58.08 spamd
> child (perl)
> spamd 294 0.0 7.1 22392 18220 ?? Is 11Apr05 0:01.61
> /usr/local/bin/spamd -d -c -u spamd -H /home/spamd -r /var/run/spamd.pid
> (perl)
> $
>
> Is this intended or is it a bug? The two threads I've seen that pertain
> to it (both dating from Oct04) are left unresolved:
> http://thread.gmane.org/gmane.mail.spam.spamassassin.general/57900
> http://thread.gmane.org/gmane.mail.spam.spamassassin.general/58087
>
> The practical consequence of this (aside from the unorthodoxy --
> undesired processes owned by root) is that the permissions of my
> ~user/.spamassassin/bayes_journal file get changed to root:spamd 0660. I
> wanted them to be spamd:user 0660, so that the user can run sa-learn
> without asking for root's help. Is that not the 'right way' to do things?
>
> Has there been a resolution to this question? If not, .. doesn't
> everybody have this problem? Or is it not a problem? If not, why not?
Hi,
Yes, to the best of my knowledge it is a problem but the devs haven't
seemed to acknowledged it. I think it's related to another SA bug
having to do with per user rules only working the first time the child
is loaded, of course I could be wrong.
It doesn't affect me now that I've switched to a global bayes in MySQL
and user prefs in MySQL but a hack might be to set the bayes_mode 0777
in the local.cf file so that at least you'll always have read/write
access to the files.
HTH,
Regards,
Rick
PS. No offense meant to the devs, I know their time is limited and they
are working on a great many things.