Daniel Kahn Gillmor wrote:
> On Tue 2007-04-17 17:42:29 -0400, Tom Bombadil wrote:
> 
>> I swear I looked in the man page and I googled it :)
> 
>> But is there any way of running dspam with an alternative dspam.conf?
> 
>> Something like:
> 
>> dspam -f /different/dir/dspam.conf
> 
>> Basically, I want run two (or more) instances of dspam with different
>> configurations in the same box.
> 
> One problem with this approach is that dspam.conf contains paths to
> libraries that can be loaded in.  If /usr/bin/dspam itself is setuid
> (as it is expected to be in some configurations), allowing alternate
> config files presents a security risk.
> 
> I proposed something like this a while back, including patches that
> would refuse to switch to an alternate config file if they detected an
> suid environment, but jonz seemed uninterested because of the security
> concerns.  Sadly, i never heard a clear explanation from him about why
> the setuid detection in the patch didn't address those concerns.
> 
> The patches can be found in the debian bug tracker at the moment.  i
> haven't had time to get them working against 3.8.0 yet:
> 
>   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369886
> 
> I'd be happy to hear any feedback on the patches.
> 
> hth,
> 
>         --dkg


So, if we need to run 3 instances of dspam (normal usage, spam training,
and innocent training), the best we can do for now is recompile dspam 3
times with different configure options?

It would probably be more flexible to define the paths to the libraries
in configure/compile time, and instead of the config file.


Thanks :)

Reply via email to