OK. Here's another mistake I made. I plucked rc-redhat.sh.in
from the tarball. But the makefile creates a nicely transformed
version in usr/src. And it comes out with user="root", which
(if I understand it correctly) may not be a good strategy.
sendmail seems to have moved away from that to tighten
up security (hence the whole smmsp thing).
The makefile fills in the daemon line correctly:
daemon --user=$user /usr/local/bin/milter-greylist $OPTIONS
I guess permissions would not be a problem if milter-greylist
were running as root.
It looks as though the makefile has to decide on a user
at build time:
install-db:
${INSTALL} -d -m 755 -o ${USER} ${DESTDIR}/var/milter-greylist
Yes. USER= root.
But there are evidently different approaches to what the
daemon user should be (grmilter, smmsp, root). With the
sock and the dumpfile in the same folder, not having
the right owner and permissions if you're not running
as root is going to cause problems, isn't it?
I have a Fedora 10 sandbox I can play in. I'll install
milter-greylist on it, obeying the README, and NOT
TOUCH ANYTHING.
The Fedora RPM was still using /db/ for the dumpfile.
It's not current with the present structure--and, of
course, it differs with its preference for /var/run/milter-greylist
over /var/milter-greylist.
MartyMessage
Re: [milter-greylist] Configuring milter-greylist on Fedora 9
2009-02-12 by Martin X. Moleski, SJ
Attachments
- No local attachments were found for this message.