Hi Brad, Brad Koehn schrieb :
> > On Dec 30, 2003, at 5:45 PM, Hans Gerber wrote: > > > >>> We only want spamd to listen on '--socketpath=path'. Spamc should > >be>> invoked from within .procmailrc. > >> > >> I could not get this method to work. > > > > It does work, afaik unix-socket should be cheaper with Resources > > than TCP_Socket. > > The socket implementation appears to be quite a bit faster, at least > on my wimpy little linux system. I use "/usr/bin/spamd -dca > --socketpath=/var/run/spamassassin" to launch spamd, and > "/usr/bin/spamc -U /var/run/spamassassin -u $USER" to run spamc. Works > > well, and makes me feel a little more secure (even though spamd over > TCP binds only to 127.0.0.1 by default). That is the way I am heading too right now. > As to your other question, couldn't you launch spamc as the user who's > receiving the mail? It would seem fairly easy to have spamd check the > UID of the process that connected through the unix socket, and that > should be good enough to authenticate. spamc will be called in "~/.procmailrc", so it will be launched with the correct uid. But problem as I understand is that spamd does just take the user that is provided in the first line of the "message-block" that arrives. Except "--auth-ident" there is no check whatsoever performed on the user-string that has been submitted. I have been running spamd with a perl-debugger, but since I dont have decent knowledge of perl I dont really understand what to do about it. It should really be possible to provide a "user-check" on the process that has been writing to the unix-socket, but afaik it is not in there right now. I'll let you know if I get a clue. Cheers, Hans ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
