On Sunday, 3 January 2010, Andrew Archibald wrote:
> Greylisting in the latest stable sa-exim doesn't appear to work with the
> default permissions on the tuplets directory left by a d-i fresh install,
> using the 'Mail server' software collection option.
> 
> # ls -ld /var/spool/sa-exim/tuplets/
> drwxr-x--- 2 nobody Debian-exim 4096 2009-12-17 11:20
> /var/spool/sa-exim/tuplets/
> 
> It seems that reconfiguring, as below, tidies up the perms.
>
> # dpkg-reconfigure sa-exim
> Reloading exim4 configuration files: exim4.
> # ls -ld /var/spool/sa-exim/tuplets
> drwxrwx--x 2 nobody Debian-exim 4096 2009-12-17 11:20
> /var/spool/sa-exim/tuplets

Yes, that the permissions where set differently the first time than on 
subsequent invokations was a bug.
 
> The default of running the greylistclean as nobody also surprised me. With
> Debian-exim writing to the tuplets dir, nobody didn't have enough access:
> 
> nobody@myhost:/$ /usr/share/sa-exim/greylistclean
> Can't cd to (/var/spool/sa-exim/tuplets/) 92: Permission denied
>  at /usr/share/sa-exim/greylistclean line 79

Well, the default setup relies on you running spamd as "nobody", as described 
in README.greylisting. That is, however, not really a great idea - "nobody" 
shouldn't own any files IIUC - so I'll change the package to work with the 
default setup of spamd and add more information to the README files. I'll try 
to make it so that existing installations won't be broken...

-- 
Magnus Holmgren        holmg...@debian.org
Debian Developer 

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to