Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] Configuring milter-greylist on Fedora 9

2009-02-12 by Martin X. Moleski, SJ

OK.  Here's another mistake I made.  I plucked rc-redhat.sh.in
from the tarball.  But the makefile creates a nicely transformed
version in usr/src.  And it comes out with user="root", which
(if I understand it correctly) may not be a good strategy.
sendmail seems to have moved away from that to tighten
up security (hence the whole smmsp thing).

The makefile fills in the daemon line correctly:

daemon --user=$user /usr/local/bin/milter-greylist $OPTIONS

I guess permissions would not be a problem if milter-greylist
were running as root.

It looks as though the makefile has to decide on a user
at build time:

install-db:
	${INSTALL} -d -m 755 -o ${USER} ${DESTDIR}/var/milter-greylist

Yes. USER= root.

But there are evidently different approaches to what the
daemon user should be (grmilter, smmsp, root).  With the
sock and the dumpfile in the same folder, not having
the right owner and permissions if you're not running
as root is going to cause problems, isn't it?

I have a Fedora 10 sandbox I can play in.  I'll install
milter-greylist on it, obeying the README, and NOT
TOUCH ANYTHING.

The Fedora RPM was still using /db/ for the dumpfile.
It's not current with the present structure--and, of
course, it differs with its preference for /var/run/milter-greylist
over /var/milter-greylist.

				Marty

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.