On Sun, 15 Sep 2019 13:36:13 -0600 @lbutlr wrote: > On Sep 15, 2019, at 6:53 AM, RW <rwmailli...@googlemail.com> wrote: > > When child processes are running as root they switch to the unix > > user running spamc (or specified with spamc -u) for processing the > > scan. If that would still result in root being used the child > > process switches to nobody instead. > > OK, should I set rc.conf to pass -u spamd then?
Probably, unless you need spamd to use per user files in ~/.spamassassin. Running spamc as a single unprivileged user has a similar effect, but it's more error prone. > And if this is an issue, why is “run as root” marked as “recommended” > when setting up spamassassin in FreeBSD ports? The meaning of that is confusing, AS_ROOT actually causes -u to be added. I've a vague recollection that this came up on the ports list and someone tried to make a case that it was correct. But looking back through the history, it looks like a "!" fell-off, probably when the port was switched to the "options framework". I presume it was originally recommended a long time ago, when it was more common to use procmail to deliver to home directories.
