Well, now I am more thoroughly confused than usual. #:)
On 4/15/18 2:04 PM, RW wrote:
On Sun, 15 Apr 2018 13:39:31 -0500
Computer Bob wrote:
Update:
For this location, it is ok to have a central bayes database, so I
turned off AWL, adjusted local.cf to contain:
bayes_path /Central_Path/bayes_db/bayes
bayes_file_mode 0777
Don't set 0777. If that's still in the wiki someone with access should
remove it.
So is the SiteWideBayesSetup ok to run without the 0777 ?
All setting bayes_path buys you here is the ability to run sa-learn and
spamassassin as root, something you should *never* do anyway.
This seems contrary to
https://wiki.apache.org/spamassassin/SiteWideBayesSetup does it not ?
Why should sa-learn not be run as root ?
If you run spamd as the unix user spamd, with "-u spamd", then spamd
look for files in ~spamd which is where it was finding them when you
(correctly) ran spamassassin as spamd.
The /etc/init.d/spamassassin init script is not starting spamd with -u,
it is only -D but clearly mail processing in the logs show:
Apr 16 17:31:13 M1-2 spamd[3926]: spamd: connection from localhost
[127.0.0.1]:49938 to port 783, fd 5
Apr 16 17:31:13 M1-2 spamd[3926]: spamd: setuid to spamd succeeded
<---changing here***
Apr 16 17:31:13 M1-2 spamd[3926]: spamd: processing message
<c1865663-4f27-48d3-be47-93af6e0ed...@hoexcas01.ad.microcenter.com> for
spamd:1001
Apr 16 17:31:13 M1-2 postfix/smtpd[4248]: disconnect from
mail.microcenter.com[66.194.187.30] ehlo=2 starttls=1 mail=1 rcpt=1
data=1 quit=1 commands=7
Apr 16 17:31:19 M1-2 spamd[3926]: spamd: clean message (1.7/4.0) for
spamd:1001 in 6.0 seconds, 30321 bytes.
This setup is running all virtual users and virtual domains via mysql
and the logs show mail traversing the spamd daemon.
The spamd daemon is running as user spamd and does seem to be using the
SiteWide files specified.
