control: severity -1 important

On Thu, 2016-12-22 at 08:19 +0000, KLEINDIENST Eric wrote:
> Severity: critical
> 
> Justification: breaks unrelated software
That's completely exaggerated. It also usually mean something needs fixing in
the other package, actually.
> 
> 
>    * What led up to the situation? : On service startup, error message in
> kern.log
> 
>    * What exactly did you do (or not do) that was effective (or
> ineffective)? : service amavis start. Error in kern.log
> 
> 
> 
> Error in the log file :
> 
> 2016-12-22T09:14:23+01:00 server kernel: : [57702.220709] grsec: denied
> untrusted exec (due to not being in trusted group and file in non-root-owned 
> directory) of
> /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/Compile
> dRegexps/body_0/body_0.so by /usr/sbin/amavisd-new[/usr/sbin/amavi:32440]
> uid/euid:121/121 gid/egid:127/127, parent /lib/systemd/systemd[systemd:1]
> uid/euid:0/0 gid/egid:0/0

What are the original permissions on
/var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledR
egexps/body_0/ and
/var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledR
egexps/body_500/

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to