ports/mail/dspam/files/patch-src__dspam.conf.in
Jason Unovitch 2e4733463a mail/dspam: implement privilege separation (resolves bug running with suexec)
- Runs as dspam:dspam instead of root:mail. The dspam UID/GID were created
  in r168311 when the UIDs/GIDs files were added but the port had always
  used root:mail. This had prevented running the dspam webUI under Apache
  with suexec due to a minimal requirement of UID/GID of 100. The original
  unsecure behavior is available with the SETUID option.
- Default run directory is now /var/run/dspam. This follows the default
  upstream behavior and removes the patch to dspam.c as a result. Use
  RUN_DIR and correct the dspam.conf.sample file accordingly.
- Default daemon/client communication port is now 2424.
- Regen patches while here (portlint)

UPDATING: Document privilege separated dspam

PR:		115957
Reported by:	tedm@ipinc.net, support@ipinc.net
Submitted by:	Danny Warren <danny@dannywarren.com> (maintainer)
2016-05-01 01:13:06 +00:00

71 lines
2.1 KiB
Text

--- src/dspam.conf.in.orig 2012-04-11 18:48:33 UTC
+++ src/dspam.conf.in
@@ -56,6 +56,7 @@ TrustedDeliveryAgent "@delivery_agent@"
# necessary if you plan on allowing untrusted processing.
#
#UntrustedDeliveryAgent "/usr/bin/procmail -d %u"
+#UntrustedDeliveryAgent "@delivery_agent@"
#
# SMTP or LMTP Delivery: Alternatively, you may wish to use SMTP or LMTP
@@ -350,7 +351,7 @@ AllowOverride notifications
# Storage driver settings: Specific to a particular storage driver. Uncomment
# the configuration specific to your installation, if applicable.
#
-#MySQLServer /var/lib/mysql/mysql.sock
+#MySQLServer /tmp/mysql.sock
#MySQLPort
#MySQLUser dspam
#MySQLPass changeme
@@ -361,7 +362,7 @@ AllowOverride notifications
# If you are using replication for clustering, you can also specify a separate
# server to perform all writes to.
#
-#MySQLWriteServer /var/lib/mysql/mysql.sock
+#MySQLWriteServer /tmp/mysql.sock
#MySQLWritePort
#MySQLWriteUser dspam
#MySQLWritePass changeme
@@ -406,7 +407,7 @@ AllowOverride notifications
# in /var/run/postgresql/.s.PGSQL.5432 specify just the path where the socket
# resits (without .s.PGSQL.5432).
-#PgSQLServer /var/run/postgresql/
+#PgSQLServer /tmp/
#PgSQLPort
#PgSQLUser dspam
#PgSQLPass changeme
@@ -807,9 +808,9 @@ Opt out
# interfaces.
#
#ServerHost 127.0.0.1
-#ServerPort 24
+#ServerPort 2424
#ServerQueueSize 32
-#ServerPID /var/run/dspam.pid
+#ServerPID /var/run/dspam/dspam.pid
#
# ServerMode specifies the type of LMTP server to start. This can be one of:
@@ -845,18 +846,18 @@ Opt out
# you are running the client and server on the same machine, as it eliminates
# much of the bandwidth overhead.
#
-#ServerDomainSocketPath "/tmp/dspam.sock"
+#ServerDomainSocketPath "/var/run/dspam/dspam.sock"
#
# Client Mode: If you are running DSPAM in client/server mode, uncomment and
# set these variables. A ClientHost beginning with a / will be treated as
# a domain socket.
#
-#ClientHost /tmp/dspam.sock
+#ClientHost /var/run/dspam/dspam.sock
#ClientIdent "secret@Relay1"
#
#ClientHost 127.0.0.1
-#ClientPort 24
+#ClientPort 2424
#ClientIdent "secret@Relay1"
# --- RABL ---