setuid in 3.1.0

[Korchmenuk Nickolay <ny...@ukrsat.com>]

Hi

I've upgrate spamass to ver. 3.1.0(from ports)
And I have next lines in maillog now:

Sep 22 17:35:56 raider spamd[97816]: spamd: setuid to root succeeded
Sep 22 17:35:56 raider spamd[97816]: spamd: still running as root: user 
not specified with -u, not found, or set to root, falling back to nobody 
at /usr/local/bin/spamd line 1147, <GEN8> line 4.

what's wrong?
I am using default startup script for spamass without any "-u" options.

p.s. OS - FreeBSD 5.4-RELEASE-p6, Sendmail, spamass-milter
-- 
Korchmenyuk Nickolay

Re: setuid in 3.1.0

[Matt Kettler <mk...@evi-inc.com>]

Korchmenuk Nickolay wrote:
> Hi
> 
> I've upgrate spamass to ver. 3.1.0(from ports)
> And I have next lines in maillog now:
> 
> Sep 22 17:35:56 raider spamd[97816]: spamd: setuid to root succeeded
> Sep 22 17:35:56 raider spamd[97816]: spamd: still running as root: user
> not specified with -u, not found, or set to root, falling back to nobody
> at /usr/local/bin/spamd line 1147, <GEN8> line 4.
> 
> what's wrong?
> I am using default startup script for spamass without any "-u" options.

You're trying to scan mail as root. Spamd won't let that happen because it's a
security risk.

start using a -u option if you always can mail as root. If you've got a per-user
setup, this only matters when you call spamc as root.