Hello, I hope someone can help me out. I have searched though the archives, and did not find my anwser. I am running 2.63 with sendmail 8.12.11 and procmail 3.22 on Solaris 9. From what information that I have gathered, my user can not run spamc with out the spamc binary having suid bit. Here are some log files from this:
Jan 26 10:11:08 testserver.server.net sendmail[573]: [ID 801593 mail.info] i0QGB8FN000573: from=<[EMAIL PROTECTED]>, size=302, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=pc.server.net [IP] Jan 26 10:11:08 testserver.server.net spamd[570]: logmsg: connection from localhost [127.0.0.1] at port 32835 Jan 26 10:11:08 testserver.server.net spamd[570]: connection from localhost [127.0.0.1] at port 3283 procmail.log: procmail: [577] Mon Jan 26 10:11:08 2004 procmail: Executing "/usr/local/bin/spamc Here is my spamd init: /usr/local/bin/perl -T /usr/local/bin/spamd -d -a -c -D If I change spamc to have suid, spamc runs correctly, but I am unable to write to the .spamassassin dir in the users home dir. It gives me permissions problems. I have tried all kind of different permissions, and nothing works. Here are some debug logs from a test message sent with spamc having the suid bit. Procmail.log procmail: [620] Mon Jan 26 10:20:29 2004 procmail: Executing "/usr/local/bin/spamc" procmail: [620] Mon Jan 26 10:20:29 2004 procmail: No match on "^X-Spam-Status: Yes" procmail: [620] Mon Jan 26 10:20:30 2004 procmail: Assigning "LASTFOLDER=/home/other/testuser/Maildir/new/1075134029.620_0.testserver.server.net" procmail: Notified comsat: "[EMAIL PROTECTED]:/home/other/testuser/Maildir/new/1075134029.620_0.testserver.server.net" >From [EMAIL PROTECTED] Mon Jan 26 10:20:29 2004 Subject: test Folder: /home/other/testuser/Maildir/new/1075134029.620_0.spam-tes 752 Mail.log with spamassassin debug: Jan 26 10:20:29 testserver.server.net sendmail[616]: [ID 801593 mail.info] i0QGKTm4000616: from=<[EMAIL PROTECTED]>, size=302, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=pc.server.net [IP] Jan 26 10:20:29 testserver.server.net spamd[611]: logmsg: connection from localhost [127.0.0.1] at port 32841 Jan 26 10:20:29 testserver.server.net spamd[611]: connection from localhost [127.0.0.1] at port 32841 Jan 26 10:20:29 testserver.server.net spamd[623]: logmsg: info: setuid to root succeeded Jan 26 10:20:29 testserver.server.net spamd[623]: info: setuid to root succeeded Jan 26 10:20:29 testserver.server.net spamd[623]: debug: user has changed Jan 26 10:20:29 testserver.server.net spamd[623]: debug: bayes: 623 untie-ing Jan 26 10:20:29 testserver.server.net spamd[623]: debug: using "/.spamassassin" for user state dir Jan 26 10:20:29 testserver.server.net spamd[623]: debug: bayes: no dbs present, cannot scan: /.spamassassin/bayes_toks Jan 26 10:20:29 testserver.server.net spamd[623]: debug: Score set 1 chosen. Jan 26 10:20:29 testserver.server.net spamd[623]: logmsg: Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. Jan 26 10:20:29 testserver.server.net spamd[623]: Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. Jan 26 10:20:29 testserver.server.net spamd[623]: logmsg: processing message <[EMAIL PROTECTED]> for root:60001. Jan 26 10:20:29 testserver.server.net spamd[623]: processing message <[EMAIL PROTECTED]> for root:60001. Jan 26 10:20:29 testserver.server.net spamd[623]: debug: using "/.spamassassin" for user state dir Jan 26 10:20:29 testserver.server.net spamd[623]: debug: bayes: no dbs present, cannot scan: /.spamassassin/bayes_toks Jan 26 10:20:29 testserver.server.net spamd[623]: debug: received-header: parsed as [ ip=IP rdns=pc.server.net helo=server.net by=testserver.server.net ident= ] Jan 26 10:20:29 testserver.server.net spamd[623]: debug: received-header: cannot use DNS, do not trust any hosts from here on Jan 26 10:20:29 testserver.server.net spamd[623]: debug: received-header: relay IP trusted? no Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running header regexp tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running body-text per-line regexp tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: Razor2 is not available Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running raw-body-text per-line regexp tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running uri tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: uri tests: Done uriRE Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running full-text regexp tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: Razor2 is not available Jan 26 10:20:29 testserver.server.net spamd[623]: debug: Pyzor is not available: pyzor not found Jan 26 10:20:29 testserver.server.net spamd[623]: debug: DCCifd is not available: no r/w dccifd socket found. Jan 26 10:20:29 testserver.server.net spamd[623]: debug: DCC is not available: no executable dccproc found. Jan 26 10:20:29 testserver.server.net spamd[623]: debug: all '*From' addrs: [EMAIL PROTECTED] Jan 26 10:20:29 testserver.server.net spamd[623]: debug: all '*To' addrs: [EMAIL PROTECTED] Jan 26 10:20:29 testserver.server.net spamd[623]: debug: forged-HELO: from=centurytel.net helo=centuytel.net by=centurytel.net Jan 26 10:20:29 testserver.server.net spamd[623]: debug: forged-HELO: mismatch on HELO: 'centuytel.net' != 'centurytel.net' Jan 26 10:20:29 testserver.server.net spamd[623]: debug: running meta tests; score so far=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: auto-learn? ham=0.1, spam=12, body-hits=0, head-hits=0 Jan 26 10:20:29 testserver.server.net spamd[623]: debug: auto-learn: currently using scoreset 1. no need to recompute. Jan 26 10:20:29 testserver.server.net spamd[623]: debug: auto-learn? yes, ham (0 < 0.1) Jan 26 10:20:29 testserver.server.net spamd[623]: debug: Learning Ham Jan 26 10:20:29 testserver.server.net spamd[623]: debug: uri tests: Done uriRE Jan 26 10:20:29 testserver.server.net spamd[623]: debug: using "/.spamassassin" for user state dir Jan 26 10:20:29 testserver.server.net spamd[623]: debug: bayes: 623 untie-ing Jan 26 10:20:29 testserver.server.net spamd[623]: debug: auto-learning failed: lock: 623 cannot create tmp lockfile /.spamassassin/bayes.lock.testserver.server.net.623 for /.spamassassin/bayes.lock: Permission denied\n Jan 26 10:20:29 testserver.server.net spamd[623]: debug: using "/.spamassassin" for user state dir Jan 26 10:20:29 testserver.server.net spamd[623]: debug: open of AWL file failed: lock: 623 cannot create tmp lockfile /.spamassassin/auto-whitelist.lock.testserver.server.net.623 for /.spamassassin/auto-whitelist.lock: Permission denied\n Jan 26 10:20:29 testserver.server.net spamd[623]: debug: is spam? score=0 required=5 tests= Jan 26 10:20:29 testserver.server.net spamd[623]: logmsg: clean message (0.0/5.0) for root:60001 in 0.5 seconds, 629 bytes. Jan 26 10:20:29 testserver.server.net spamd[623]: clean message (0.0/5.0) for root:60001 in 0.5 seconds, 629 bytes. Jan 26 10:20:30 testserver.server.net sendmail[617]: [ID 801593 mail.info] i0QGKTm4000616: to=<[EMAIL PROTECTED]>, ctladdr=<[EMAIL PROTECTED]> (120/14), delay=00:00:01, xdelay=00:00:01, mailer=local, pri=30569, relay=local, dsn=2.0.0, stat=Sent I have tried all kinds of different permissions on the home dir and a created .spamassassin dir and nothing works. Can someone please help me out. Thank you, Keith ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
