-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue 2007-04-17 17:42:29 -0400, Tom Bombadil wrote:

> I swear I looked in the man page and I googled it :)
>
> But is there any way of running dspam with an alternative dspam.conf?
>
> Something like:
>
> dspam -f /different/dir/dspam.conf
>
> Basically, I want run two (or more) instances of dspam with different
> configurations in the same box.

One problem with this approach is that dspam.conf contains paths to
libraries that can be loaded in.  If /usr/bin/dspam itself is setuid
(as it is expected to be in some configurations), allowing alternate
config files presents a security risk.

I proposed something like this a while back, including patches that
would refuse to switch to an alternate config file if they detected an
suid environment, but jonz seemed uninterested because of the security
concerns.  Sadly, i never heard a clear explanation from him about why
the setuid detection in the patch didn't address those concerns.

The patches can be found in the debian bug tracker at the moment.  i
haven't had time to get them working against 3.8.0 yet:

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369886

I'd be happy to hear any feedback on the patches.

hth,

        --dkg
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>

iD8DBQFGJUeFiXTlFKVLY2URAsLsAKC9roXzS976NbVvnNKb6qzTMz134ACg57gX
5e6tfeI76x2IbTqf6M67p3g=
=c0Wk
-----END PGP SIGNATURE-----

Reply via email to