diff options
| author | Jason Unovitch <junovitch@FreeBSD.org> | 2016-05-01 01:13:06 +0000 |
|---|---|---|
| committer | Jason Unovitch <junovitch@FreeBSD.org> | 2016-05-01 01:13:06 +0000 |
| commit | 2e4733463a4bc714bc94da00e4e9da9f56fdd703 (patch) | |
| tree | 3afde4310eacf906074e9fc3c2684964c5c5aa75 /mail/dspam/files/patch-src__daemon.c | |
| parent | - Update to 0.36.1 (diff) | |
mail/dspam: implement privilege separation (resolves bug running with suexec)
- Runs as dspam:dspam instead of root:mail. The dspam UID/GID were created
in r168311 when the UIDs/GIDs files were added but the port had always
used root:mail. This had prevented running the dspam webUI under Apache
with suexec due to a minimal requirement of UID/GID of 100. The original
unsecure behavior is available with the SETUID option.
- Default run directory is now /var/run/dspam. This follows the default
upstream behavior and removes the patch to dspam.c as a result. Use
RUN_DIR and correct the dspam.conf.sample file accordingly.
- Default daemon/client communication port is now 2424.
- Regen patches while here (portlint)
UPDATING: Document privilege separated dspam
PR: 115957
Reported by: tedm@ipinc.net, support@ipinc.net
Submitted by: Danny Warren <danny@dannywarren.com> (maintainer)
Diffstat (limited to 'mail/dspam/files/patch-src__daemon.c')
| -rw-r--r-- | mail/dspam/files/patch-src__daemon.c | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/mail/dspam/files/patch-src__daemon.c b/mail/dspam/files/patch-src__daemon.c new file mode 100644 index 000000000000..3fee692297c2 --- /dev/null +++ b/mail/dspam/files/patch-src__daemon.c @@ -0,0 +1,22 @@ +--- src/daemon.c.orig 2012-04-11 18:48:33 UTC ++++ src/daemon.c +@@ -97,7 +97,7 @@ int daemon_listen(DRIVER_CTX *DTX) { + int domain = 0; /* listening on domain socket? */ + int listener; /* listener fd */ + int i; +- int port = 24, queue = 32; /* default port and queue size */ ++ int port = 2424, queue = 32; /* default port and queue size */ + + signal(SIGPIPE, SIG_IGN); + signal(SIGINT, process_signal); +--- src/daemon.c.orig 2012-04-11 18:48:33 UTC ++++ src/daemon.c +@@ -97,7 +97,7 @@ int daemon_listen(DRIVER_CTX *DTX) { + int domain = 0; /* listening on domain socket? */ + int listener; /* listener fd */ + int i; +- int port = 24, queue = 32; /* default port and queue size */ ++ int port = 2424, queue = 32; /* default port and queue size */ + + signal(SIGPIPE, SIG_IGN); + signal(SIGINT, process_signal); |