At 01:34 AM 12/14/2005, Gene Heskett wrote:
Now, pursuant to someone elses advice, I've got those directories, both /root/.spamassassin and /etc/mail/spamassasin have been subjected to a chown -R spamd:spamd, but the perms problems continue, and this frigging paypal/ebay phishing is coming in at about 200 copies a day.
Gene, are you using /root/ as the homedir for your spamd user? Fortunately unix is protecting you from yourself here. Your effort to give spamd rights to /root/.spammassassin is foolish and outright dangerous. Since spamd has no rights to /root, it can't read /root/.spamassassin. But stop trying to give spamd any rights to root's homedir. It's a dangerous game. You really don't want it to have any rights to these files.
Make sure the spamd user has it's OWN homedir in /home/spamd, or some such thing. Make sure the /etc/passwd entry for the spamd user reflects this, and if it doesn't make use of usermod or similar tools to change it.
At that point spamd should start reading from /home/spamd/.spamassassin, and not /root/.spamassasin. If it persists, there's a bug in SA.
Be sure to chown -R /root/.spamassassin back to root's ownership ASAP, as that's a bit dangerous and could lead to a privilege escalation attack, were spamd actually able to make use of it (which fortunately it can't).
I'd also suggest chowning /etc/mail/spamassassin back into root's ownership. The spamd user has no need for ownership rights over this directory, it only needs to be able to read and list files in it (world r_x for the directories, r__ for the files)
