Public bug reported:

I was surprised that after following
https://help.ubuntu.com/14.04/serverguide/mail-filtering.html this
leaves me with the spamassassin daemon running as root.

This is not of the same standard compared with the secure defaults that
Postfix and Dovecot use. I think this undermines the whole setup and
comes a bit unexpected. I would suggest to create a separate
unprivileged user (maybe spamd?) for running spamd only and keep the
user debian-spamd for updating the rules.

** Affects: spamassassin (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to spamassassin in Ubuntu.
https://bugs.launchpad.net/bugs/1442087

Title:
  don't run as root by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/spamassassin/+bug/1442087/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to