I'm using a spam blocking setup utilizing procmail, relaydb,
spamd-setup and pf.

The problem is that if I specify DROPPRIVS in my /etc/procmailrc:

DROPPRIVS=yes

:0fw
| /usr/local/bin/spamc

:0c
* ^X-Spam-Status: Yes
| /usr/local/bin/relaydb -b
:0:
* ^X-Spam-Status: Yes
in-x-spam

:0c
| /usr/local/bin/relaydb -w

then relaydb seems to create a .relaydb for the user that the mail was
delivered for so that when spamd-setup is called (which uses relaydb as
one of its inputs) it doesn't find any of them because it's ran as root.

Now obviously I could just get rid of DROPPRIVS but spamd doesn't seem
to like this:

Sep  8 11:07:37 bollo spamd[4493]: info: setuid to root succeeded
Sep  8 11:07:37 bollo spamd[4493]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.

and it's obviously not ideal from a security standpoint. So my question
is does anybody have any solutions or suggestions on how to work around
this?

Many thanks.

Simon

-- 
I am the mother of all things, and all things should wear a sweater.

Reply via email to