-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ah, good to hear -- although it would have been nice to have had that
noted on bug 3900, which was still listed as "awaiting confirmation"...

- --j.

Charles Sprickman writes:
> I've seen this problem as well, even in the latest "ports" version.  Still 
> runs as root.  If I apply the attached patch (obtained from one of the 
> bugzilla entries), it works properly.  Running FBSD 4.11 w/perl 5.6.2 
> (5.8.7 had the same problem, I backed out of 5.8 since it chewed up more 
> memory than I was comfortable with).
> 
> Charles
> 
> On Mon, 8 Aug 2005, Dan Mahoney, System Admin wrote:
> 
> > On Tue, 26 Apr 2005, Justin Mason wrote:
> >
> >> 
> >> It's specifically a problem with perl on *BSD platforms -- there's
> >> a bug open about it, but it's stalled because we don't have any
> >> developers with BSD machines ;)
> >
> > Anyone want a test machine where this is occurring?  Where it DIDN'T occur 
> > before under 3.0.3?  Contact me offlist.
> >
> > I've had a bugzilla report sitting in "NEW" status for over a month now, I 
> > think.  I flagged it as "security" because I a) thought maybe there was 
> > some 
> > priority to that and b) actually believe it to be, but nobody has done 
> > anything with it.
> >
> > http://bugzilla.spamassassin.org/show_bug.cgi?idD98
> >
> > -Dan
> >
> >> 
> >> at least on some platforms (MacOS X) it appears perl's setuid
> >> support substantially does not work.
> >> 
> >> --j.
> >> 
> >> Brandon Kuczenski writes:
> >>> I've seen this question posted a couple times in the mailing list archives
> >>> (from October 2004) but no resolution.  The question again:
> >>> 
> >>> I'm running SpamAssassin 3.0.2 on FreeBSD 4.10 in spamc/spamd format with
> >>> the '-u spamd' flag.  Problem is, all the child processes are running as
> >>> root:
> >>> 
> >>> $ ps aux | grep spam
> >>> root      333  0.0 10.1 27636 25932  ??  I    11Apr05   1:03.83 spamd 
> >>> child (perl)
> >>> root      332  0.0 10.5 29020 27032  ??  I    11Apr05   1:07.96 spamd 
> >>> child (perl)
> >>> root      331  0.0  9.7 26544 24852  ??  I    11Apr05   0:52.68 spamd 
> >>> child (perl)
> >>> root      330  0.0  9.9 27152 25524  ??  I    11Apr05   1:04.40 spamd 
> >>> child (perl)
> >>> root      329  0.0  9.8 26864 25116  ??  I    11Apr05   0:58.08 spamd 
> >>> child (perl)
> >>> spamd     294  0.0  7.1 22392 18220  ??  Is   11Apr05   0:01.61 
> >>> /usr/local/bin/spamd -d -c -u spamd -H /home/spamd -r /var/run/spamd.pid 
> >>> (perl)
> >>> $
> >>> 
> >>> Is this intended or is it a bug?  The two threads I've seen that pertain
> >>> to it (both dating from Oct04) are left unresolved:
> >>> http://thread.gmane.org/gmane.mail.spam.spamassassin.general/57900
> >>> http://thread.gmane.org/gmane.mail.spam.spamassassin.general/58087
> >>> 
> >>> The practical consequence of this (aside from the unorthodoxy -- undesired
> >>> processes owned by root) is that the permissions of my
> >>> ~user/.spamassassin/bayes_journal file get changed to root:spamd 0660.
> >>> I wanted them to be spamd:user 0660, so that the user can run
> >>> sa-learn without asking for root's help.  Is that not the 'right way' to
> >>> do things?
> >>> 
> >>> Has there been a resolution to this question?  If not, .. doesn't
> >>> everybody have this problem?  Or is it not a problem?  If not, why not?
> >>> 
> >>> -Brandon
> >> ------------ Output from gpg ------------
> >> gpg: WARNING: using insecure memory!
> >> gpg: please see http://www.gnupg.org/faq.html for more information
> >> gpg: Signature made Tue Apr 26 19:09:08 2005 EDT using DSA key ID 298BC7D0
> >> gpg: Good signature from "Justin Mason <[EMAIL PROTECTED]>"
> >> gpg: WARNING: This key is not certified with a trusted signature!
> >> gpg:          There is no indication that the signature belongs to the 
> >> owner.
> >> Primary key fingerprint: 1368 71CE 3627 9CD3 FA1B  0B63 3091 7972 298B C7D0
> >> 
> >> 
> >
> > --
> >
> > "Don't try to out-wierd me.  I get stranger things than you free with my
> > breakfast cereal."
> >
> > -Button seen at I-CON XVII (and subsequently purchased)
> >
> > --------Dan Mahoney--------
> > Techie,  Sysadmin,  WebGeek
> > Gushi on efnet/undernet IRC
> > ICQ: 13735144   AIM: LarpGM
> > Site:  http://www.gushi.org
> > ---------------------------
> >
> >
> --0-343817720-1123532392=:14641
> Content-Type: TEXT/PLAIN; charset=US-ASCII; name="spamd-euid.patch"
> Content-Transfer-Encoding: BASE64
> Content-ID: <[EMAIL PROTECTED]>
> Content-Description: 
> Content-Disposition: attachment; filename="spamd-euid.patch"
> 
> LS0tIHNwYW1kLm9sZAlXZWQgT2N0IDEzIDE2OjQ5OjU4IDIwMDQNCisrKyBz
> cGFtZAlUaHUgT2N0IDE0IDIwOjE1OjUzIDIwMDQNCkBAIC03MDAsNiArNzAw
> LDE1IEBADQogICAjIENoYW5nZSBVSUQNCiAgICQ+ID0gJHV1aWQ7ICAgICAg
> ICAgICAgIyBlZmZlY3RpdmUgdWlkDQogICAkPCA9ICR1dWlkOyAgICAgICAg
> ICAgICMgcmVhbCB1aWQuIHdlIG5vdyBjYW5ub3Qgc2V0dWlkIGFueW1vcmUN
> CisNCisgIGlmICggJDwgIT0gJHV1aWQgKSB7DQorICAgIHdhcm4oImluaXRp
> YWwgYXR0ZW1wdCB0byBjaGFuZ2UgcmVhbCB1aWQgZmFpbGVkLCB0cnlpbmcg
> QlNEIHdvcmthcm91bmQiKSBpZiAkb3B0eydkZWJ1Zyd9Ow0KKw0KKyAgICAk
> PiA9ICQ8OwkJCSMgcmV2ZXJ0IGV1aWQgdG8gcnVpZA0KKyAgICAkPCA9ICR1
> dWlkOwkJCSMgY2hhbmdlIHJ1aWQgdG8gdGFyZ2V0DQorICAgICQ+ID0gJHV1
> aWQ7CQkJIyBjaGFuZ2UgZXVpZCBiYWNrIHRvIHRhcmdldA0KKyAgfQ0KKw0K
> ICAgaWYgKCAkPiAhPSAkdXVpZCBhbmQgJD4gIT0gKCAkdXVpZCAtIDIqKjMy
> ICkgKSB7DQogICAgIGRpZSAiZmF0YWw6IHNldHVpZCB0byB1aWQgJHV1aWQg
> ZmFpbGVkXG4iOw0KICAgfQ0K
> 
> --0-343817720-1123532392=:14641--
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFC98VLMJF5cimLx9ARAinPAJ4liaAFAHjBS9grfkXYNLhvhUzJKwCgqWFd
wA0I06Ox514Q27ttExFG4WM=
=Amth
-----END PGP SIGNATURE-----

Reply via email to