RE: -u option on CVS

[Daniel A. Deitch]

Thanks ... I've set it. How can I make sure that it's running as
sharedspam? I haven't seen a "uid set to sharedspam" ... just the same
log msg

Thanks again for the help .... looking forward to 3.0 !!

Daniel
 

________________________________

Daniel A. Deitch, President * iTrain Technologies, Ltd.
po box 13833 * atlanta, ga   30324-0833 * 404-876-1929 (o)
404-935-5005 (f) * www.goitrain.com 
 

-----Original Message-----
From: Dan Nelson [mailto:address@hidden 
Sent: Sunday, February 06, 2005 3:42 PM
To: Daniel A. Deitch
Cc: address@hidden
Subject: Re: -u option on CVS

In the last episode (Feb 06), Daniel A. Deitch said:
> Correct ... the Info user doesn't exist, but then it doesn't revert
> to the SHAREDSPAM user, it reverts to root ... I'll add the flag and
> repost ...
[...]
> Feb  6 18:45:32 spamass-milter[63385]: calling /usr/sbin/sendmail -bv
"<address@hidden>" 2>&1
> Feb  6 18:45:32 spamass-milter[63385]: sendmail output:
<address@hidden>... deliverable: mailer esmtp, host
divots.dnsalias.org., user address@hidden
> Feb  6 18:45:32 spamass-milter[63385]: user:
address@hidden
> Feb  6 18:45:32 spamass-milter[63385]: Total of 1 actual recipients
> Feb  6 18:45:32 spamass-milter[63385]: remembering
address@hidden for spamc
> Feb  6 18:45:32 spamass-milter[63385]: remembering recipient
<address@hidden>
> Feb  6 18:45:33 spamass-milter[64083]: spamc gets jgarrison
> Feb  6 18:45:33 spamd[63373]: connection from localhost [127.0.0.1] at
port 1471 
> Feb  6 18:45:33 spamd[63373]: handle_user: unable to find user
'jgarrison'! 
> Feb  6 18:45:33 spamd[63373]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody. 
> Feb  6 18:45:33 spamd[63373]: processing message
<address@hidden> for jgarrison:65534. 
> Feb  6 18:45:35 spamd[63373]: identified spam (20.6/5.0) for
jgarrison:65534 in 1.8 seconds, 21313 bytes. 
> Feb  6 18:45:35 spamd[63373]: result: Y 20 -
FORGED_RCVD_HELO,HTML_50_60,HTML_MESSAGE,HTML_NONELEMENT_30_40,MIME_HTML
_MOSTLY,NO_REAL_NAME,divots_woodenhangers
scantime=1.8,size=21313,mid=<address@hidden>,autolea
rn=failed 

Hre's what's happenning for this email:

Spamass-milter gets the recipient address as <address@hidden>. It
then asks sendmail to expand that, which produces
<address@hidden>.  Spamass-milter strips off the domain
part and passes the username "jgarrison" to SpamAssassin.  SpamAssassin
looks up the username and fails, reverting to the root user.

This is actually how it's supposed to work.  Spamass-milter doesn't
know what user database SpamAssassin is using; all it can do is try and
rewrite aliases/virtualhosts and hope the resulting address is one
SpamAssassin knows about.  If you were using SpamAssassin's SQL
backend, for example, the userlist doesn't have to correspond to local
userids at all.

What might work for you is editing SpamAssassin's spamd script to
setuid itself to "sharedspam" instead of "nobody" around line 1043:

  my ( $uid, $gid ) = ( getpwnam('nobody') )[ 2, 3 ];


-- 
        Dan Nelson
        address@hidden