PDA

View Full Version : Some odd permission deny's


Morons
12th August 2010, 00:40
I logged my procmail and found some issues:

Aug 12 00:32:44.860 [15485] warn: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /var/www/web90/user/someuser/.spamassassin/auto-whitelist.lock.somedomail.tld.15485 for /var/www/web90/user/someuser/.spamassassin/auto-whitelist.lock: Permission denied
Aug 12 00:32:44.869 [15485] warn: plugin: eval failed: bayes: (in learn) locker: safe_lock: cannot create tmp lockfile /var/www/web90/user/someuser/.spamassassin/bayes.lock.somedomail.tld.15485 for /var/www/web90/user/someuser/.spamassassin/bayes.lock: Permission denied

Please explain the solution to me!

falko
12th August 2010, 13:14
What's the output of ls -la /var/www/web90/user/someuser/.spamassassin/?

Morons
12th August 2010, 14:09
root@hera:~# ls -la /var/www/web62/user/nutri-anna-marie/.spamassassin/
total 11248
drwx------ 2 root root 4096 2010-05-01 21:06 .
drwxr-xr-x 5 root root 4096 2010-05-01 21:06 ..
-rw------- 1 root root 335872 2010-05-01 21:06 auto-whitelist
-rw------- 1 root root 663552 2010-05-01 21:06 bayes_seen
-rw------- 1 root root 10510336 2010-05-01 21:06 bayes_toks
lrwxrwxrwx 1 root root 48 2010-05-01 21:06 user_prefs -> /var/www/web62/user/nutri-anna-marie/.user_prefs

OFC that is one sample I have a couple of them exactly like this,
Looks like some process / daemon is NOT running in the correct user, I cant imagine how all the directories changed if the problem was directory security!:o

till
12th August 2010, 15:38
Maybe you have reconfigured your system to use spamd instaed of the default spamsacan setup of ispconfig? Or you restored the files from a backup? With spamscan, these files are all owned by the system user that owns the email account, but your files are owned by root, so they must have been written by some kind of daemon or they had been copied from another instal without preserving permissions.

Morons
12th August 2010, 15:56
Yes probably the backup-restore , Will have to work on those, I will write a bash script to fix permissions,

As before I have pleaded the case for clamd, (BTW changing it back did not change the issue at hand) BUT Please make it an installation option to switch to clamd, as clamd uses almost NO resources whereas clamscan does lock-up cpu to 100%, especailly on slow internet connections witch we have all over the world except US and Europe! Places like South Africa and other have those issues where the ISP's all cache traffic via transparent proxy and no one can do anything about it.
:cool: