Bug 171725

Summary:	mail-filter/dspam: dspamc should be setuid
Product:	Gentoo Linux	Reporter:	Jonas Jonsson <jonas>
Component:	New packages	Assignee:	Alin Năstac (RETIRED) <mrness>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Jonas Jonsson 2007-03-21 21:21:05 UTC

When installing with the daemon use-flag the dspamc binary is installed and it should have setuid also, else it can't read dspam.conf.

Reproducible: Always

Comment 1 Alin Năstac (RETIRED) gentoo-dev

2007-03-22 09:45:14 UTC

But /usr/bin/dspam is installed with sgid
  tsr ~ # ls -l /usr/bin/dspam
  -r-x--s--x 1 root dspam 62892 2007-01-08 17:42 /usr/bin/dspam
and dspam.conf has the following permissions
  tsr dspam # ls -l /etc/mail/dspam/dspam.conf
  -rw-r----- 1 root dspam 27770 2007-01-08 17:42 /etc/mail/dspam/dspam.conf

Unless I am missing something here, this should be enough.

Comment 2 Jonas Jonsson 2007-03-22 11:00:07 UTC

Well.. Almost...

It was /usr/bin/dspamc (Observe the c at the end) I was talking about. The dspam binary is working as it should. dspamc is a lightweight version of dspam that only  has the --client stuff not the rest.

Comment 3 Alin Năstac (RETIRED) gentoo-dev

2007-03-22 14:49:42 UTC

fixed in dspam-3.6.8-r3. 
thanks!