spamassassin a possible security risk?

[Matthew Miller]

On Mon, Oct 18, 2004 at 09:13:20PM -0500, John Thompson wrote:
> Try "grep spamd /var/log/maillog" and see if your spamd is reverting to
> "nobody" when it runs.

:) Either you're presenting a subtle socratic argument here, or you didn't
try this yourself -- if you did, you'd see that it is setting its id to that
of the calling user when it runs. Even better.


-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>