[Bug 1185489] New: permissions of dspamc different than dspam

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1185489

            Bug ID: 1185489
           Summary: permissions of dspamc different than dspam
           Product: Fedora EPEL
           Version: el6
         Component: dspam
          Severity: low
          Assignee: nathanael at gnat.ca
          Reporter: kirkman.brian at gmail.com
        QA Contact: extras-qa at fedoraproject.org
                CC: nathanael at gnat.ca, perl-devel at lists.fedoraproject.org



Description of problem:
The permissions for /usr/bin/dspam are 2511 dspam:mail whereas the permissions
for /usr/bin/dspamc are 755 root:root. Dspam runs fine as a daemon being called
by postfix, but calling dspamc to connect to the daemon is too permissive for
most applications, i.e. dovecot-antispam.


Version-Release number of selected component (if applicable):
dspam 3.10.2 and dspam-client 3.10.2


How reproducible:
Always


Steps to Reproduce:
1. setup a working dspam daemon
2. setup dovecot-antispam to call dspamc
3. move message from Inbox to Junk folder


Actual results:
/var/log/maillog logs the following when moving message from inbox to Junk
folder:
Jan 23 15:33:37 mail.localhost dspam[16176]: Unable to open file for reading:
/etc/dspam.conf: Permission denied
Jan 23 15:33:37 mail.localhost dspam[16176]: Unable to read dspam.conf
Jan 23 15:33:37 mail.localhost dovecot: imap(myuser at mydomain.com): Connection
closed bytes=153/1227


Expected results:
Permissions of dspamc should allow dspamc to connect to dspam daemon. If dspamc
is set to 2511 dspam:mail then dspamc can connect to dspam daemon.

Additional info:
The dspamc binary is installed using the dspam-client package.

The setup described above is:

Postfix --> DSPAM daemon [LMTP unix socket] --> Dovecot [LMTP unix socket]

with dspamc being called from dovecot-antispam to connect to the dspam daemon
and retrain spam.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=KiDoaR7AZv&a=cc_unsubscribe