> On 10/30/10, Michael Scheidell wrote: >> On 10/30/10 12:12 PM, Gary V wrote: >>> Got it. File permissions for amavisd.conf (or for Debian '50-user' or >>> other file) cannot be set to 0600 or 0640; they must be set to at >>> least 0644 which means that SQL passwords cannot be hidden from prying >>> eyes. >> what about owned by the amavisd user? >> (that is what happens, ) you chg owner when starting and that owner >> needs to be able to read all the files. >> > > According to: http://www.ijs.si/software/amavisd/INSTALL.txt > > chown root:amavis /etc/amavisd.conf > chmod 640 /etc/amavisd.conf > > Yeah, that works. Thanks Michael. For previous versions of > amavisd-new, package maintainers that I've seen so far have it set to > 0644 and root:root. Hopefully they will make the change (or suffer a > bug report). >
Mark, may I assume that you will consider a note in RELEASE NOTES or possibly even some code to check for and log incompatible ownership/permissions? -- Gary V ------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org
