Sorry but the original permission are.
Wrong copy/paste

ls -al 
/var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledRegexps
 -a
/var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/CompiledRegexps:
total 12
drwxrwxr-x 3 debian-spamd debian-spamd 4096 Dec 22 18:07 .
drwxrwxr-x 3 debian-spamd debian-spamd 4096 Dec 22 18:07 ..
drwxrwxr-x 2 debian-spamd debian-spamd 4096 Dec 22 18:07 body_0
drwxrwxr-x 2 debian-spamd debian-spamd 4096 Dec 22 18:07 body_500

Best regards

------------------------
Eric KLEINDIENST

-----Original Message-----
From: Yves-Alexis Perez [mailto:[email protected]] 
Sent: jeudi 22 décembre 2016 19:31
To: KLEINDIENST Eric; [email protected]
Subject: Re: Bug#849056: linux-image-4.7.0-1-grsec-amd64: fails to use amavis 
with spamassa

On Thu, 2016-12-22 at 17:15 +0000, KLEINDIENST Eric wrote:
> # ll
> /var/lib/spamassassin/compiled/5.020/3.004000/auto/Mail/SpamAssassin/Compile
> dRegexps -a
> total 16
> drwxrwxrwx 4 debian-spamd debian-spamd 4096 déc.  21 16:26 .
> drwxrwxrwx 3 debian-spamd debian-spamd 4096 déc.  21 16:26 ..
> drwxrwxrwx 2 debian-spamd         debian-spamd 4096 déc.  21 16:26 body_0
> drwxrwxrwx 2 debian-spamd         debian-spamd 4096 déc.  21 16:26 body_500

That's awfully insecure. That means anyone can write there (and provide some
code to execute to spamassassin). Please fix that, you don't especially need
root-owned directory, but you sure don't want permissions that wide. I
especially would advise against making those dirs writable by the user running
the spamassassin daemon.

Regards,
-- 
Yves-Alexis

Reply via email to