At 08:52 PM 9/11/03 -0600, Alan Fullmer wrote:
So I have 2  files:  /home/dick/.spamassassin/user_prefs  and
/home/jane/.spamassassin/user_prefs
<snip>

It does not even touch those user_prefs files (checked it with the -D
option)

Well, you've never told spamc to use jane or dick's userid.. so it's going to use spamfilter's user_prefs and it will never touch any other user_prefs in the system.


If you pass spamc -u jane, it will cause spamd to read jane's user_prefs, so get that information to it, and you'll get the behavior you want.

Spamd does not ever try to infer what userid it should run as from the content of the message. It will only do it based on what user spamc is executed as, or based on the -u parameter to spamc, if provided. The reason for this is simple..spamc can't reliably know who the mail is for. The message might not be addressed to them (ie: a bcc), and spamc never sees the message envelope.

Note: you might need to call spamc as root for -u to work fully.. I've never tried it as a deprived user.


1) You should not use user_prefs with the spamd due to security risks.

That's not true.. you can use user_prefs with spamd quite safely.. but not for rules.


You can do things like set the default hits, declare whitelist_from's, even over-ride scores.. but any body, header, rawbody, etc statements are rules and can be abused in user_prefs. SpamAssassin will by default ignore anything which can contain a regex in user_prefs.

2)  I cannot have my MTA call the function.  I have to have something like
procmail do the work.

Hmm, I'm not sure that's a problem, but most people do use procmail to do the work, if for no other reason than added capabilities that are handy.


I would like to have a global local.cf for those who do not have thier own
user_prefs file.
I would like to have the ability to scan for each user.  based on that
user_prefs file.

That's quite possible, but as I said above, spamc needs to know what user to act as, it can't figure it out on it's own.






-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to