Matt Kettler a écrit :
> Kate Kleinschafer wrote:
>> Hi all,
>>
>> Just wondering what the permissions should be on the
>> /root/.spamassassin folder.
>>
>> When I run a message by the command
>> sudo -u postfix spamassassin -p
>> /etc/MailScanner/spam.assassin.prefs.conf -t < message.MAI
>>
>> I am getting the error warn: config: path /root/.spamassassin is
>> inaccessible permission denied.
>> owned by root:root
>> permissions drwx
>>
> That sounds like the postfix user doesn't have a home directory it can
> read/write, and it was pointed at /root to prevent it from having
> access. This is probably intentional in the security design of postfix,
> so it might be unwise to change it.
> 

hmm. postfix has a home dir, /var/spool/postfix (which is not writable
by postfix). so I bet /root/.spamassassin came from somewhere else (
spam.assassin.prefs.conf?).

> I would strongly consider running SA as a different user, one which has
> a home directory it has rights to. That also means you'd need to change
> your mailscanner config, and possibly rights on your
> /var/spool/MailScanner/* directories. However, I'm not terribly familiar
> here.
> 
> The simple thing to do would be to create a /home/postfix, and modify
> the postfix user to have that homedir, but this would likely increase
> the risks of your postfix process being exploitable.
> 

This would indeed be unwise. but I doubt it would change anything.

The easy way is to test SA as root. or as another user, possibly after
copying Bayes and AWL files.

Reply via email to