Hello, Here are the original permissions
# ll /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledRegexps -a total 16 drwxrwxrwx 4 debian-spamd debian-spamd 4096 déc. 21 16:26 . drwxrwxrwx 3 debian-spamd debian-spamd 4096 déc. 21 16:26 .. drwxrwxrwx 2 debian-spamd debian-spamd 4096 déc. 21 16:26 body_0 drwxrwxrwx 2 debian-spamd debian-spamd 4096 déc. 21 16:26 body_500 My workaround service amavis stop chown root /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledRegexps/body* chmod -R go-w /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledRegexps/body* service amavis start Best regards ------------------------ Eric KLEINDIENST Conseil de l’Europe DIT / Infogérance Serveurs, Base de données et Open Source -----Original Message----- From: Yves-Alexis Perez [mailto:[email protected]] Sent: jeudi 22 décembre 2016 16:47 To: KLEINDIENST Eric; [email protected] Subject: Re: Bug#849056: linux-image-4.7.0-1-grsec-amd64: fails to use amavis with spamassa control: severity -1 important On Thu, 2016-12-22 at 08:19 +0000, KLEINDIENST Eric wrote: > Severity: critical > > Justification: breaks unrelated software That's completely exaggerated. It also usually mean something needs fixing in the other package, actually. > > > * What led up to the situation? : On service startup, error message in > kern.log > > * What exactly did you do (or not do) that was effective (or > ineffective)? : service amavis start. Error in kern.log > > > > Error in the log file : > > 2016-12-22T09:14:23+01:00 server kernel: : [57702.220709] grsec: denied > untrusted exec (due to not being in trusted group and file in non-root-owned > directory) of > /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/Compile > dRegexps/body_0/body_0.so by /usr/sbin/amavisd-new[/usr/sbin/amavi:32440] > uid/euid:121/121 gid/egid:127/127, parent /lib/systemd/systemd[systemd:1] > uid/euid:0/0 gid/egid:0/0 What are the original permissions on /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledR egexps/body_0/ and /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledR egexps/body_500/ Regards, -- Yves-Alexis
