Keeping current with SpamAssassin rules
Posted Dec 7, 2006 10:28 UTC (Thu) by
nix (subscriber, #2304)
Parent article:
Keeping current with SpamAssassin rules
Different channels don't necessarily handle different types of spam: they're just distributed by different people (and hence signed by different GPG keys). (Often they *will* handle different types of spam, of course, but the question `do you trust this channel's operator' should be foremost.)
By the time plugins are executed, spamd is no longer running as root: it should have dropped privileges. (So a hostile ruleset can merely smash all your users' home directories, set up spambots, et seq. Possibly this isn't much of an improvement over wrecking the whole system...)
(
Log in to post comments)