Michael Monnerie wrote:
> 
> Is it true I cannot set the bayes_path per user when using spamc/spamd?

No, you cannot, other than by using ~/ to direct it into their home directory at
a site-wide level. The same goes for any path setting.

This has to do with security concerns. Spamd is a mixed privilege application
(started as root, setuid'ed later), and giving the user power to dictate
directories could cause a security hole if something went awry in spamd's setuid
process.

By default user's also can't create any rule statements which might have regular
expressions in them, for the same reasons.


> When using "spamassassin -D -r" I can see that the user bayes is used 
> correctly.

Yes, the spamassassin script doesn't enforce any security rules, and will accept
any parameter in user_prefs, even admin settings. This is because spamassassin
always runs as the current user, it never starts as one user then setuid's to
another. No mixed-privilege security problems possible.

Reply via email to