On Tue, 9 Aug 2005, Craig McLean wrote:
I applied the patch, and it fixed things on my end. I noted in my PR that
it was also odd to me that before, the children showed in ps as "perl" and
afterwards as "perl5.8.6" or something very similar.
FWIW I *don't* see this issue on FBSD 5.2.1 running SA 3.0.4 with perl 5.6.1
Craig.
Justin Mason wrote:
ah, good to hear -- although it would have been nice to have had that
noted on bug 3900, which was still listed as "awaiting confirmation"...
--j.
Charles Sprickman writes:
I've seen this problem as well, even in the latest "ports" version.
Still
runs as root. If I apply the attached patch (obtained from one of the
bugzilla entries), it works properly. Running FBSD 4.11 w/perl 5.6.2
(5.8.7 had the same problem, I backed out of 5.8 since it chewed up
more
memory than I was comfortable with).
Charles
On Mon, 8 Aug 2005, Dan Mahoney, System Admin wrote:
On Tue, 26 Apr 2005, Justin Mason wrote:
It's specifically a problem with perl on *BSD platforms -- there's a
bug open about it, but it's stalled because we don't have any
developers with BSD machines ;)
Anyone want a test machine where this is occurring? Where it DIDN'T
occur
before under 3.0.3? Contact me offlist.
I've had a bugzilla report sitting in "NEW" status for over a month
now, I
think. I flagged it as "security" because I a) thought maybe there
was some
priority to that and b) actually believe it to be, but nobody has done
anything with it.
http://bugzilla.spamassassin.org/show_bug.cgi?idD98
-Dan
at least on some platforms (MacOS X) it appears perl's setuid support
substantially does not work.
--j.
Brandon Kuczenski writes:
I've seen this question posted a couple times in the mailing list
archives
(from October 2004) but no resolution. The question again:
I'm running SpamAssassin 3.0.2 on FreeBSD 4.10 in spamc/spamd format
with
the '-u spamd' flag. Problem is, all the child processes are
running as
root:
$ ps aux | grep spam
root 333 0.0 10.1 27636 25932 ?? I 11Apr05 1:03.83
spamd
child (perl)
root 332 0.0 10.5 29020 27032 ?? I 11Apr05 1:07.96
spamd
child (perl)
root 331 0.0 9.7 26544 24852 ?? I 11Apr05 0:52.68
spamd
child (perl)
root 330 0.0 9.9 27152 25524 ?? I 11Apr05 1:04.40
spamd
child (perl)
root 329 0.0 9.8 26864 25116 ?? I 11Apr05 0:58.08
spamd
child (perl)
spamd 294 0.0 7.1 22392 18220 ?? Is 11Apr05 0:01.61
/usr/local/bin/spamd -d -c -u spamd -H /home/spamd -r
/var/run/spamd.pid
(perl)
$
Is this intended or is it a bug? The two threads I've seen that
pertain
to it (both dating from Oct04) are left unresolved:
http://thread.gmane.org/gmane.mail.spam.spamassassin.general/57900
http://thread.gmane.org/gmane.mail.spam.spamassassin.general/58087
The practical consequence of this (aside from the unorthodoxy --
undesired
processes owned by root) is that the permissions of my
~user/.spamassassin/bayes_journal file get changed to root:spamd
0660.
I wanted them to be spamd:user 0660, so that the user can run
sa-learn without asking for root's help. Is that not the 'right
way' to
do things?
Has there been a resolution to this question? If not, .. doesn't
everybody have this problem? Or is it not a problem? If not, why
not?
-Brandon
------------ Output from gpg ------------
298BC7D0
gpg: There is no indication that the signature belongs to
the
owner.
298B C7D0
--
"Don't try to out-wierd me. I get stranger things than you free with
my
breakfast cereal."
-Button seen at I-CON XVII (and subsequently purchased)
--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site: http://www.gushi.org
---------------------------
--0-343817720-1123532392=:14641
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="spamd-euid.patch"
Content-Transfer-Encoding: BASE64
Content-ID:
<[EMAIL PROTECTED]>
Content-Description:
Content-Disposition: attachment; filename="spamd-euid.patch"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--0-343817720-1123532392=:14641--
------------ Output from gpg ------------
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: Signature made Tue Aug 9 09:02:12 2005 EDT using DSA key ID 2D95C09E
gpg: BAD signature from "Craig McLean (Local Address) <[EMAIL PROTECTED]>"
--
"She's been getting attacked by these leeches, they're leaving these marks
all over her neck. You gotta keep her out of those woods. If one more
leech gets her, she's gonna get a smack."
-Someone's Mother, December 18th, 1998
--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site: http://www.gushi.org
---------------------------
