Bug 1616 - razor2 creates user config files mode 0777
Summary: razor2 creates user config files mode 0777
Status: RESOLVED WONTFIX
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamc/spamd (show other bugs)
Version: 2.50
Hardware: PC Linux
: P5 major
Target Milestone: 2.60
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-03-07 03:01 UTC by Wilton Wong
Modified: 2003-04-05 05:08 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Wilton Wong 2003-03-07 03:01:28 UTC 
Running spamd "spamd -d -x -c -a -Q" with RAZOR2 enabled creates default .razor
files with mode 0777 owned by the spamc user with group root.

.spamassassin files are created with proper permissions but are owned by group root.
Comment 1 Justin Mason 2003-03-18 16:25:19 UTC 
should be easy enough to fix with umask in 2.52
Comment 2 Theo Van Dinter 2003-03-24 13:24:15 UTC 
the group is fixed in 2.51.  permissions are set by umask of the spamd 
process.  we could do something like "if current umask is 0, set to 
something reasonable", but it seems like the kind of thing you'd just set 
when you run spamd.

thoughts?

setting to 2.6 since it would be a new feature to change the umask 
otehrwise.
Comment 3 Antony Mawer 2003-03-24 21:55:56 UTC 
Subject: Re: [SAdev]  razor2 creates user config files mode 0777 


> the group is fixed in 2.51.  permissions are set by umask of the spamd 
> process.  we could do something like "if current umask is 0, set to 
> something reasonable", but it seems like the kind of thing you'd just set 
> when you run spamd.
> 
> thoughts?

Yep, agreed.  Really, that's *exactly* what the umask is for, and running
daemons with a umask of 000 is a bit like having no password on the root
account, ie. a bad idea. ;)

--j.
Comment 4 Malte S. Stretz 2003-03-25 09:26:58 UTC 
I think we should take The Good Olde Unix Way: If the user wants to shoot 
himself in the foot, let him ;-)
Comment 5 Theo Van Dinter 2003-04-05 14:08:21 UTC 
it seems to be agreed: make sure you run spamd with an appropriate umask, and 
the resulting file permissions will be good too. :)