Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 171725 - mail-filter/dspam: dspamc should be setuid
Summary: mail-filter/dspam: dspamc should be setuid
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Alin Năstac (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-03-21 21:21 UTC by Jonas Jonsson
Modified: 2007-03-22 14:49 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jonas Jonsson 2007-03-21 21:21:05 UTC 
When installing with the daemon use-flag the dspamc binary is installed and it should have setuid also, else it can't read dspam.conf.

Reproducible: Always
Comment 1 Alin Năstac (RETIRED) gentoo-dev 2007-03-22 09:45:14 UTC 
But /usr/bin/dspam is installed with sgid
  tsr ~ # ls -l /usr/bin/dspam
  -r-x--s--x 1 root dspam 62892 2007-01-08 17:42 /usr/bin/dspam
and dspam.conf has the following permissions
  tsr dspam # ls -l /etc/mail/dspam/dspam.conf
  -rw-r----- 1 root dspam 27770 2007-01-08 17:42 /etc/mail/dspam/dspam.conf

Unless I am missing something here, this should be enough.
Comment 2 Jonas Jonsson 2007-03-22 11:00:07 UTC 
Well.. Almost...

It was /usr/bin/dspamc (Observe the c at the end) I was talking about. The dspam binary is working as it should. dspamc is a lightweight version of dspam that only  has the --client stuff not the rest.
Comment 3 Alin Năstac (RETIRED) gentoo-dev 2007-03-22 14:49:42 UTC 
fixed in dspam-3.6.8-r3. 
thanks!