Ian Douglas wrote:
> Any permission issues to take into account if you make the owner of
> the file something other than the user's login name? If you change
> the owner of the filename but maintain writable permission to the
> files otherwise, you effectively have no quota issue as someone else
> will own the files, correct?

Nominally true, but not a good solution if you can avoid it.

If you allow shell access, you therefore effectively allow any user to
meddle with any other user's SA prefs, AWL, and Bayes files if you do
per-user Bayes as well.  :/

What would be needed to keep this decently secure (IMHO) is a way to
have SA manage the file ownership and permissions as necessary, probably
from spamd running as root.

What I found is that since SA doesn't seem to mind having the
~/.spamassassin directories symlinked, they can be on a different
partition (assuming you've set up separate partitions for things!) and
still retain their permission-based security AND not contribute to the
users' quotas.

-kgd
-- 
<erno> hm. I've lost a machine.. literally _lost_. it responds to
ping, it works completely, I just can't figure out where in my
apartment it is.


-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to