Gary,

> Razor2 for use with amavisd-new. Mini HOWTO

Thanks, nice.

One general remark: it is better if the not-to-be-mucked-with files
such as razor-agent.conf are not owned by (nor live in a directory
owned by) vscan, just in case. It is safer to have them owned by root
and let them live perhaps in /etc.

For the same reason I also prefer if the directory /var/amavis
is owned by root and not writable by vscan, but provide
a subdirectory such as /var/amavis/home, owned by vscan,
where SA and other dynamic data files can live:

  $MYHOME = '/var/amavis';   # a convenient default for other settings
  $helpers_home = "$MYHOME/home";  # prefer $MYHOME clean and owned by root
  $pid_file  = "$helpers_home/amavisd.pid";
  $lock_file = "$helpers_home/amavisd.lock";

The ownerships/protections are then something like:

  $ ll -d /var/amavis
  drwxr-x--x  8 root   wheel  512 Aug  5 15:29 /var/amavis

  $ ll -d /var/amavis/home
  drwxr-x---  5 vscan  vscan  512 Aug 11 09:48 /var/amavis/home

  $ ll /var/amavis/home/
  drwxrwxr-x  2 vscan  vscan  512 Aug  5 02:17 .pyzor
  drwxrwxr-x  2 vscan  vscan  512 Aug 11 09:44 .razor
  drwxrwxr-x  2 vscan  vscan  512 Aug 11 10:09 .spamassassin
  -rw-r-----  1 vscan  vscan    0 Aug 11 10:09 amavisd.lock
  -rw-r-----  1 vscan  vscan    6 Aug 11 09:48 amavisd.pid

Mark


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to