Matt Kettler wrote:
Kate Kleinschafer wrote:
Hi all,

Just wondering what the permissions should be on the
/root/.spamassassin folder.

When I run a message by the command
sudo -u postfix spamassassin -p
/etc/MailScanner/spam.assassin.prefs.conf -t < message.MAI

I am getting the error warn: config: path /root/.spamassassin is
inaccessible permission denied.
owned by root:root
permissions drwx

That sounds like the postfix user doesn't have a home directory it can
read/write, and it was pointed at /root to prevent it from having
access. This is probably intentional in the security design of postfix,
so it might be unwise to change it.
Yeah I don't think I will change this.
I would strongly consider running SA as a different user, one which has
a home directory it has rights to. That also means you'd need to change
your mailscanner config, and possibly rights on your
/var/spool/MailScanner/* directories. However, I'm not terribly familiar
here.

SA is running as that user becuase I think that MailScanner calls spamassassin as that user
The simple thing to do would be to create a /home/postfix, and modify
the postfix user to have that homedir, but this would likely increase
the risks of your postfix process being exploitable.

I think I will leave it as is right now.

Thanks for your advice.
Kate

Reply via email to