ok, thanks all. I think I have it.
zeus:bayes_db robert$ ls -la total 6528 drwxr-xr-x 5 spamuser wheel 170 3 Mar 15:35 . drwxrwxrwx 3 root wheel 102 3 Mar 14:37 .. -rw-rw---- 1 spamuser wheel 49632 3 Mar 16:22 bayes_journal -rw-rw---- 1 spamuser wheel 176128 3 Mar 15:35 bayes_seen -rw-rw---- 1 spamuser wheel 3112960 3 Mar 15:35 bayes_toks Startup plist <array> <string>/opt/local/bin/daemondo</string> <string>--label=spamd</string> <string>--start-cmd</string> <string>/opt/local/libexec/perl5.22/spamd</string> <string>-l</string> <string>-u</string> <string>spamuser</string> <string>;</string> <string>--pid=exec</string> </array> It’s all still working. So fortunately not too badly out of whack… thanks folks. Robert > On 3 Mar 2016, at 16:06, Tom Hendrikx <t...@whyscream.net> wrote: > > > Hi, > > you probably messed up the permissions by running sa-learn or any other > tool that messes with the bayes files directly (i.e. not via spamd) as > root. > > Your changes work because they allow read/write access to anyone on the > system, which is not very secure. Best would be to do something like: > > chown spamuser:wheel <files> > chmod 0660 <files> > > Then restart spamd and see of it doesn't complain. This should allow > access for spamd and for users in the wheel group (administrative accounts). > > Regards, > Tom > > On 03-03-16 16:35, Robert Chalmers wrote: >> ok, I can see that. Interesting I missed it on the set up >> >> So, I’m running on OSX, and have to use plist files to start processes. >> The spamd owner is ‘spamuser’ - ( just because I did…. and as it’s not >> used outside that, I may as well leave it as such.) >> >> >> <array> >> <string>/opt/local/bin/daemondo</string> >> <string>--label=spamd</string> >> <string>--start-cmd</string> >> <string>/opt/local/libexec/perl5.22/spamd</string> >> <string>-l</string> >> <string>-u</string> >> <string>spamuser</string> >> <string>;</string> >> <string>--pid=exec</string> >> </array> >> >> So anyway, on spamd restart, it all still appears to be working ok. >> Although I’m fully expecting something to come along and bite me. >> >> So what exactly is the “kludge” - given that mostly I followed the Wiki >> and various other setup guidelines? I’m not doing per user configs, but >> site wide. >> >> >> >> >> >>> On 3 Mar 2016, at 15:09, RW <rwmailli...@googlemail.com >>> <mailto:rwmailli...@googlemail.com <mailto:rwmailli...@googlemail.com>>> >>> wrote: >>> >>> On Thu, 3 Mar 2016 14:46:33 +0000 >>> Robert Chalmers wrote: >>> >>> >>>> >>>> /var/spamassassin/bayes_db >>>> >>>> drwxr-xr-x 3 root wheel 102 3 Mar 14:37 . >>>> drwxr-xr-x 28 root wheel 952 23 Jan 15:58 .. >>>> drwxr-xr-x 5 root wheel 170 3 Mar 14:37 bayes_db >>>> >>>> >>>> -rw-rw-rw- 1 root wheel 2304 3 Mar 14:39 bayes_journal >>>> -rw-rw-rw- 1 root wheel 176128 3 Mar 14:32 bayes_seen >>>> -rw-rw-rw- 1 root wheel 3112960 3 Mar 14:32 bayes_toks >>> >>> If spamd is running as user spamd (i.e. started as spamd -u spamd) the >>> files should be own by spamd. >>> >>> Don't run spamd without "-u" less you absolutely need to read per user >>> config from unix home directories. In that case use an sql database or >>> or leave the db files under ~/.spamassassin What you have there is a >>> dreadful kludge. >>> >>> And yes, I do know that it's suggested on the wiki. >> >> Robert Chalmers >> rob...@chalmers.com <mailto:rob...@chalmers.com> <mailto:rob...@chalmers.com >> <mailto:rob...@chalmers.com>>.au Quantum Radio: >> http://tinyurl.com/lwwddov <http://tinyurl.com/lwwddov> >> Mac mini 6.2 - 2012, Intel Core i7,2.3 GHz, Memory:16 GB. El-Capitan >> 10.11. XCode 7.2.1 >> 2TB: Drive 0:HGST HTS721010A9E630. Upper bay. Drive 1:ST1000LM024 >> HN-M101MBB. Lower Bay Robert Chalmers rob...@chalmers.com <mailto:rob...@chalmers.com>.au Quantum Radio: http://tinyurl.com/lwwddov Mac mini 6.2 - 2012, Intel Core i7,2.3 GHz, Memory:16 GB. El-Capitan 10.11. XCode 7.2.1 2TB: Drive 0:HGST HTS721010A9E630. Upper bay. Drive 1:ST1000LM024 HN-M101MBB. Lower Bay