On 08/11/10 09:04:49, Stevan Bajić wrote: > > > > -r-x--s--x 1 dspam mail 104256 Jul 13 08:10 /usr/bin/dspam > > > > Above, setgid on /usr/bin/dspam, group = mail. > > > > See? It is setgid.
It didn't surprise me: dspam can be used as an email local delivery agent; setgid 'mail' makes sense. > > Everything is mode 0755 and owner/group is root/root. > > > What do you mean with everything? What everything? # rpm -ql dspam | grep /usr/bin | xargs ls -ld -r-x--s--x 1 dspam mail 104256 Jul 13 08:10 /usr/bin/dspam -rwxr-xr-x 1 root root 29784 Jul 13 08:10 /usr/bin/dspam_2sql -rwxr-xr-x 1 root root 30496 Jul 13 08:10 /usr/bin/dspam_admin -rwxr-xr-x 1 root root 34112 Jul 13 08:10 /usr/bin/dspam_clean -rwxr-xr-x 1 root root 20568 Jul 13 08:10 /usr/bin/dspam_crc -rwxr-xr-x 1 root root 30024 Jul 13 08:10 /usr/bin/dspam_dump -rwxr-xr-x 1 root root 114 Jan 24 2010 /usr/bin/dspam-front -rwxr-xr-x 1 root root 4202 Jan 11 2010 /usr/bin/dspam_logrotate -rwxr-xr-x 1 root root 30856 Jul 13 08:10 /usr/bin/dspam_merge -rwxr-xr-x 1 root root 33992 Jul 13 08:10 /usr/bin/dspam_stats -rwxr-xr-x 1 root root 6475 Jul 13 08:10 /usr/bin/dspam_train > btw: Is the lock now removed or is it still there? Yup. I didn't do anything to get rid of it, and it doesn't appear to have self-destructed. # ls -l /var/lib/dspam/data/g/a/gary -rw-rw---- 1 gary mail 69928008 Aug 9 13:55 gary.css -rw-r--r-- 1 root root 0 Aug 9 13:55 gary.lock -rw-rw---- 1 gary mail 2658112 Aug 12 03:16 gary.log drwxrwx--- 2 gary mail 819200 Aug 9 08:15 gary.sig -rw-rw---- 1 gary mail 21 Aug 9 08:15 gary.stats ------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev _______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user
