On Mon, Aug 04, 2003 at 11:27:43PM -0700, Patrick Morris wrote:
> You can't define rules in user prefs unless you also define the
> allow_user_rules variable. See the Mail::SpamAssassin::Conf man page
> for reasons why this my not be a good idea.
HHmm... that's inconvenient. This is what the man-page has to say:
allow_user_rules { 0 | 1 } (default: 0)
This setting allows users to create rules (and only
rules) in their `user_prefs' files for use with `spamd'.
It defaults to off, because this could be a severe
security hole. It may be possible for users to gain root
level access if `spamd' is run as root. It is NOT a good
idea, unless you have some other way of ensuring that
users' tests are safe. Don't use this unless you are
certain you know what you are doing. Furthermore, this
option causes spamassassin to recompile all the tests
each time it processes a message for a user with a rule
in his/her `user_prefs' file, which could have a
significant effect on server load. It is not
recommended.
So does that mean I'm stuck and there's nothing I can do to configure SA?
If it's a security hole, I have no expectation that I will be allowed to
do make my own rules. So what am I supposed to do?
--
Daniel Carrera | PGP: 6643 8C8B 3522 66CB D16C D779 2FDD 7DAC 9AF7 7A88
Math PhD. UMD | http://www.math.umd.edu/~dcarrera/pgp.html
* * * * * Weekly Smile * * * * * * * * * * * * * * * * * * * * * * * *
Sign in a hotel in Athens:
Visitors are expected to complain at the office between the hours
of 9 and 11 A.M. daily.
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
