http://bugzilla.spamassassin.org/show_bug.cgi?id=3609





------- Additional Comments From [EMAIL PROTECTED]  2004-07-15 00:10 -------
Subject: Re:  spamd doesn't allow bayes_learn_to_journal

On Wed, Jul 14, 2004 at 11:59:23PM -0700, [EMAIL PROTECTED] wrote:
> IMO, a user should be able to select where they want to learn to (bayes_path),
> possibly overriding an admin's shared db.  (if it doesn't currently allow 
> that,
> it probably should ;)

oh I don't like that at all.  for instance, if spamd is running on a
host w/ global bayes db, all a user has to do is change their config to
put a new db in /tmp/bayes or any accessible location, and set huge max
db size, and they can start DoS'ing the machine.

same with the other options imo.  perhaps what we need is another config
option that allows the admin to override the priv requirements for
certain options.  set the defaults to assume per user db, and things
generally user-available, then if the admin wants to lock it down,
they can, without changing our code.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to