Re: [AMaViS-user] Razor2 and amavisd-new

Gary,

> Razor2 for use with amavisd-new. Mini HOWTO

Thanks, nice.

One general remark: it is better if the not-to-be-mucked-with files
such as razor-agent.conf are not owned by (nor live in a directory
owned by) vscan, just in case. It is safer to have them owned by root
and let them live perhaps in /etc.

For the same reason I also prefer if the directory /var/amavis
is owned by root and not writable by vscan, but provide
a subdirectory such as /var/amavis/home, owned by vscan,
where SA and other dynamic data files can live:

$MYHOME = '/var/amavis'; # a convenient default for other settings
$helpers_home = "$MYHOME/home"; # prefer $MYHOME clean and owned by root
$pid_file = "$helpers_home/amavisd.pid";
$lock_file = "$helpers_home/amavisd.lock";

The ownerships/protections are then something like:

$ ll -d /var/amavis
drwxr-x--x 8 root wheel 512 Aug 5 15:29 /var/amavis

$ ll -d /var/amavis/home
drwxr-x--- 5 vscan vscan 512 Aug 11 09:48 /var/amavis/home

$ ll /var/amavis/home/
drwxrwxr-x 2 vscan vscan 512 Aug 5 02:17 .pyzor
drwxrwxr-x 2 vscan vscan 512 Aug 11 09:44 .razor
drwxrwxr-x 2 vscan vscan 512 Aug 11 10:09 .spamassassin
-rw-r----- 1 vscan vscan 0 Aug 11 10:09 amavisd.lock
-rw-r----- 1 vscan vscan 6 Aug 11 09:48 amavisd.pid

Mark


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/