Hi,

you probably messed up the permissions by running sa-learn or any other
tool that messes with the bayes files directly (i.e. not via spamd) as
root.

Your changes work because they allow read/write access to anyone on the
system, which is not very secure. Best would be to do something like:

chown spamuser:wheel <files>
chmod 0660 <files>

Then restart spamd and see of it doesn't complain. This should allow
access for spamd and for users in the wheel group (administrative accounts).

Regards,
        Tom

On 03-03-16 16:35, Robert Chalmers wrote:
> ok, I can see that. Interesting I missed it on the set up
> 
> So, I’m running on OSX, and have to use plist files to start processes.
> The spamd owner is ‘spamuser’ - ( just because I did…. and as it’s not
> used outside that, I may as well leave it as such.)
> 
> 
> <array>
> <string>/opt/local/bin/daemondo</string>
> <string>--label=spamd</string>
> <string>--start-cmd</string>
> <string>/opt/local/libexec/perl5.22/spamd</string>
> <string>-l</string>
> <string>-u</string>
> <string>spamuser</string>
> <string>;</string>
> <string>--pid=exec</string>
> </array>
> 
> So anyway, on  spamd restart, it all still appears to be working ok.
> Although I’m fully expecting something to come along and bite me.
> 
> So what exactly is the “kludge” - given that mostly I followed the Wiki
> and various other setup guidelines? I’m not doing per user configs, but
> site wide.
> 
> 
> 
> 
> 
>> On 3 Mar 2016, at 15:09, RW <rwmailli...@googlemail.com
>> <mailto:rwmailli...@googlemail.com>> wrote:
>>
>> On Thu, 3 Mar 2016 14:46:33 +0000
>> Robert Chalmers wrote:
>>
>>
>>>
>>> /var/spamassassin/bayes_db
>>>
>>> drwxr-xr-x   3 root  wheel  102  3 Mar 14:37 .
>>> drwxr-xr-x  28 root  wheel  952 23 Jan 15:58 ..
>>> drwxr-xr-x   5 root  wheel  170  3 Mar 14:37 bayes_db
>>>
>>>
>>> -rw-rw-rw-  1 root  wheel     2304  3 Mar 14:39 bayes_journal
>>> -rw-rw-rw-  1 root  wheel   176128  3 Mar 14:32 bayes_seen
>>> -rw-rw-rw-  1 root  wheel  3112960  3 Mar 14:32 bayes_toks
>>
>> If spamd is running as user spamd (i.e. started as spamd -u spamd) the
>> files should be own by spamd.
>>
>> Don't run spamd without "-u" less you absolutely need to read per user
>> config from unix home directories. In that case use an sql database or
>> or leave the db files under ~/.spamassassin  What you have there is a
>> dreadful kludge.
>>
>> And yes, I do know that it's suggested on the wiki.
> 
> Robert Chalmers
> rob...@chalmers.com <mailto:rob...@chalmers.com>.au  Quantum Radio:
> http://tinyurl.com/lwwddov
> Mac mini 6.2 - 2012, Intel Core i7,2.3 GHz, Memory:16 GB. El-Capitan
> 10.11.  XCode 7.2.1
> 2TB: Drive 0:HGST HTS721010A9E630. Upper bay. Drive 1:ST1000LM024
> HN-M101MBB. Lower Bay
> 
> 
> 
> 


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to