On 2015-11-09 16:42 +0100, Antony Stone wrote:

> What did Jessie install it as?
> 
> > > /var/mail/.spamassassin/user_prefs

This is very strange.  Are you really sure it is not operator error?

I run wheezy, so I can't flat out exclude it, but it flies in the face
of too much Debian tradition. /var/mail is just for the spool mailboxes.

> 1. I seriously doubt that on a Debian system exim is running as root.

Indeed:

 [6+0]~$ ps axl | fgrep 'exim4 -bd'
5   101  3230     1  20   0  46824  2860 ?      Ss   ?          0:06
/usr/sbin/exim4 -bd -q30m
0  1000  8368  8311  20   0   7800  1760 -      S+   pts/1      0:00
fgrep exim4 -bd
 [7+0]~$ awk 'BEGIN { FS=":" } ( $3 == "101" ) { print $0 }' <
 /etc/passwd
Debian-exim:x:101:103::/var/spool/exim4:/bin/false

> 2. It sounds like we're talking slightly at cross-purposes here.  Exim may be 
> calling spamassassin (PS: how?)

It matters a good deal.  If it's called from the content filtering hook
or the ACLs, spamassassin runs as the exim UID (unless it is itself
setuid, of course).  But if it's called as a "transport filter", it runs
as the destination user.

-- 
Please *no* private copies of mailing list or newsgroup messages.
Rule 420: All persons more than eight miles high to leave the court.

Reply via email to