Securing spamd

2011-07-08 Thread Kārlis Repsons
All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root /usr/sbin/spamd -d -r /var/run/spamd.pid -m 2 -u spamd

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons karlis.reps...@gmail.com wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 17:03:35 +, Kārlis Repsons wrote: Stop what? questions ? I tried with --port=2580, but still one root process. But you meant it's not worth worrying about? some have answered this already On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: Do you need

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 17:34:13 Benny Pedersen wrote: On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: Do you need spamd changing OS user ids? (e.g. to access ~/.spamassassin/ ) No, I don't! one could ask how to configure it A small server. And configuration is

Re: Securing spamd

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons karlis.reps...@gmail.com wrote: On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread m...@smtp.fakessh.eu
Le vendredi 8 juillet 2011 19:00, Andrzej Adam Filip a écrit : Kārlis Repsons karlis.reps...@gmail.com wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still