Well, now I am more thoroughly confused than usual. #:)
On 4/15/18 2:04 PM, RW wrote:
On Sun, 15 Apr 2018 13:39:31 -0500
Computer Bob wrote:
For this location, it is ok to have a central bayes database, so I
turned off AWL, adjusted local.cf to contain:
Don't set 0777. If that's still in the wiki someone with access should
So is the SiteWideBayesSetup ok to run without the 0777 ?
This seems contrary to
https://wiki.apache.org/spamassassin/SiteWideBayesSetup does it not ?
All setting bayes_path buys you here is the ability to run sa-learn and
spamassassin as root, something you should *never* do anyway.
Why should sa-learn not be run as root ?
The /etc/init.d/spamassassin init script is not starting spamd with -u,
it is only -D but clearly mail processing in the logs show:
Apr 16 17:31:13 M1-2 spamd: spamd: connection from localhost
[127.0.0.1]:49938 to port 783, fd 5
Apr 16 17:31:13 M1-2 spamd: spamd: setuid to spamd succeeded
Apr 16 17:31:13 M1-2 spamd: spamd: processing message
Apr 16 17:31:13 M1-2 postfix/smtpd: disconnect from
mail.microcenter.com[22.214.171.124] ehlo=2 starttls=1 mail=1 rcpt=1
data=1 quit=1 commands=7
Apr 16 17:31:19 M1-2 spamd: spamd: clean message (1.7/4.0) for
spamd:1001 in 6.0 seconds, 30321 bytes.
If you run spamd as the unix user spamd, with "-u spamd", then spamd
look for files in ~spamd which is where it was finding them when you
(correctly) ran spamassassin as spamd.
This setup is running all virtual users and virtual domains via mysql
and the logs show mail traversing the spamd daemon.
The spamd daemon is running as user spamd and does seem to be using the
SiteWide files specified.