Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread Daryl C. W. O'Shea
Ryan Steele wrote: Theo, In the user's .procmailrc file, there is this stanza: :0fw: spamassassin.lock | /usr/bin/spamc -u username -s 128000 But, I have had this problem occur arbitrarily when no -u username is specified. I think by the time Exim4 gets to the .procmailrc, it has already dr

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread jdow
This should work and would be more generic. I presume you have "DROPPRIVS=yes" up near the top of the file. (And once privs are dropped you don't get them back.) I see that a missing lock is not the problem, though. :0fw: spamassassin.lock | /usr/bin/spamc -u $LOGNAME -s 128000 {^_^} - Origi

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread jdow
How is your procmail invoking spamc? The set of lines defining that rule might help. It ALMOST sounds like you are missing a lock there. {^_^} - Original Message - From: "Ryan Steele" <[EMAIL PROTECTED]> Theo, Well, I can verify that the users exist on the server. I'm not sure why

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread Theo Van Dinter
On Wed, Aug 16, 2006 at 12:48:14PM -0400, Ryan Steele wrote: > But, I have had this problem occur arbitrarily when no -u username is > specified. I think by the time Exim4 gets to the .procmailrc, it has > already dropped privileges, so spamc would get called as that user from > the user's .pro

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread Ryan Steele
Theo, In the user's .procmailrc file, there is this stanza: :0fw: spamassassin.lock | /usr/bin/spamc -u username -s 128000 But, I have had this problem occur arbitrarily when no -u username is specified. I think by the time Exim4 gets to the .procmailrc, it has already dropped privileges, so

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread Theo Van Dinter
On Wed, Aug 16, 2006 at 09:02:11AM -0400, Ryan Steele wrote: > Well, I can verify that the users exist on the server. I'm not sure why > spamc would be called by root...it's invoked by a .procmailrc, and > passed the -u flag and given the user name. And it arbitrarily won't How is that userna

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-16 Thread Ryan Steele
Theo, Well, I can verify that the users exist on the server. I'm not sure why spamc would be called by root...it's invoked by a .procmailrc, and passed the -u flag and given the user name. And it arbitrarily won't work for a user that in almost all other instances it *does* work for. Befor

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-15 Thread Theo Van Dinter
On Tue, Aug 15, 2006 at 05:12:42PM -0400, Ryan Steele wrote: > hitch. It seems that arbitrarily, spamd is unable to drop root > privileges. Here's the relevant log message: > > spamd: still running as root: user not specified with -u, not found, or > set to root, falling back to nobody at /usr

Re: Spamd not able to drop root privileges at arbitrary times

2006-08-15 Thread John D. Hardin
On Tue, 15 Aug 2006, Ryan Steele wrote: > spamd: still running as root: user not specified with -u, not found, or > set to root, falling back to nobody at /usr/sbin/spamd line 1150, > line 4. Me, too! It happens to me pretty regularly. I don't have any per-user configs set up. > I'm running:

Spamd not able to drop root privileges at arbitrary times

2006-08-15 Thread Ryan Steele
Greetings all, I have a bit of a mystery. Recently, I installed spamassassin on a new server. Everything seems to be working fine, except for one little hitch. It seems that arbitrarily, spamd is unable to drop root privileges. Here's the relevant log message: spamd: still running as roo