On Thu, 2007-09-13 at 00:13 +0200, Fritz Borgstedt wrote: > Questions and Answers for users of ASSP Anti-Spam SMTP Proxy > <[email protected]> schreibt: > > Or was that > >unique to 1.3.x? > > It was unique in 1.3.3. The assp.cfg got "777" to help some > installations to prevent 100% without running as root. > After this was considered a security risk (not from me) 1.3.3.1 was > released - and the 100% CPU was there again. 1.3.3.3 patched that.
Boy does clarification make all the difference of the world. On Gentoo we run assp as well assp :) It has it's own user and group created automatically on package merge. Beyond that we chown/chmod files in /etc/assp so that only assp:assp has access to that and etc. So not sure we were ever effected. Very good to know, we can look to close the security bug right away, and no worry about it. Thanks much for the clarification. -- William L. Thomson Jr. Gentoo/Java
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
