[V6.1] auto-whitelist.lock: Permission denied error

[fobe]

Hi all,

I just looked at my maillog and see multiple instances as follows:

Jun 11 12:45:27 localhost spamd[5022]: spamd: clean message (0.8/5.0) for (unknown):220 in 6.0 seconds, 1880 bytes.
Jun 11 12:45:27 localhost spamd[5022]: spamd: result: . 0 - ALL_TRUSTED,FH_FROMEML_NOTLD,MISSING_MID,TO_MALFOR MED scantime=6.0,size=1880,user=(unknown),uid=220,requ ired_score=5.0,rhost=my.server.com,raddr=127.0.0.1 ,rport=51968,mid=(unknown),autolearn=no
Jun 11 12:45:27 localhost spamd[5020]: prefork: child states: II
Jun 11 14:05:18 localhost spamd[5022]: spamd: connection from my.server.com [127.0.0.1] at port 42753
Jun 11 14:05:20 localhost spamd[5022]: spamd: checking message (unknown) for (unknown):220
Jun 11 14:05:45 localhost spamd[5022]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /var/opt/axigen/spamassassin/auto-whitelist.lock.my.server.com.5022 for /var/opt/axigen/spamassassin/auto-whitelist.lock: Permission denied

Why is "permission denied"? Is this because "auto-learn" is off? Or because root is the "owner" ?
The rigths in /var/opt/axigen/spamassassin/ are:
-rw------- 1 root root 4096 Jun 10 08:20 auto-whitelist.dir
-rw------- 1 root root 25600 Jun 10 08:20 auto-whitelist.pag
-rw-r--r-- 1 root root 5 Jun 10 08:30 spamd.pid

And the /var/opt/axigen/spamassassin/ itself :
drwx------ 2 root root 4096 Jun 10 08:30 spamassassin

Thanks in advance...

[dani]

Hello,

Please issue the following command, because this issue is related to permissions set on the files from /var/opt/axigen/spamassassin:

chown -R axigen:axigen /var/opt/axigen/spamassassin

Those files are created by Spamassassin with root as owner by default. This is because of whitelisting directly in Spamassassin.

Please give us a feedback regarding this issue.

[fobe]

Yep , that did the trick. I tought it would be a "rights"-problem...

[fobe]

hmmm, I thought it was solved now i see the following:

Jun 12 12:45:31 localhost spamd[5020]: prefork: child states: II
Jun 12 13:53:42 localhost spamd[5022]: spamd: connection from my.server.com [127.0.0.1] at port 41928
Jun 12 13:53:42 localhost spamd[5022]: spamd: checking message (unknown) for (unknown):220
Jun 12 13:53:42 localhost spamd[19991]: spamd: connection from my.server.com [127.0.0.1] at port 42761
Jun 12 13:53:42 localhost spamd[19991]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody at /usr/bin/spamd line 1161, <GEN12> line 3.
Jun 12 13:53:42 localhost spamd[19991]: spamd: checking message (unknown) for (unknown):99
Jun 12 13:53:42 localhost spamd[19991]: mkdir //.spamassassin: Permission denied at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin.pm line 1536
Jun 12 13:53:42 localhost spamd[19991]: mkdir //.spamassassin: Permission denied at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin.pm line 1536
Jun 12 13:53:42 localhost spamd[19991]: locker: safe_lock: cannot create tmp lockfile //.spamassassin/auto-whitelist.lock.overdrive.xsnetworx.com.19991 for //.spamassassin/auto-whitelist.lock: No such file or directory
Jun 12 13:53:42 localhost spamd[19991]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile //.spamassassin/auto-whitelist.lock.my.server.com.19991 for //.spamassassin/auto-whitelist.lock: No such file or directory

I think I have to make this directory manually or should axigen has more rights on certain directories....?

[fobe]

I'm using now "SpamAssassinBundled" and "SpamAssassin" is disabled.
Could this be an issue?

[daniel]

The error message is not critical, it does not interfere with message processing in any way.

To solve this issue create the /var/opt/axigen/spamassassin directory and adjust the permissions to the user used by the SpamAssassin process. Please note that the SpamAssassin process uses the default "nobody" system user for low privilege operations.

The /etc/init.d/axigenfilters init script can be edited in order to configure the SpamAssassin service to run as the "axigen" system user.

Stop the "axigenfilters" service.
Adjust the following line like in the example below:

DAEMON_OPTIONS_spamd="-d -u axigen"

Change the permissions of the /var/opt/axigen/spamassassin directory to be owned by the "axigen" system user.

Start the "axigenfilters" service.

We are waiting for feedback regarding our recommendations.

[fobe]

I've edited the line and started the service. A soon I got information if it's working correctly I let you know....

[fobe]

the errors are away! thanks a lot

[fobe]

Hi, something seems to be wrong.... the spamd.pid is changed to root again in /var/opt/axigen/spamassassin/ after I added some charts... in axigenfilter-file got the right parameters (DAEMON_OPTIONS_spamd="-d -u axigen")...
So I changed the ownership in /var/opt/axigen/spamassassin/ back to axigen:axigen and when I restart axigenfilter the spamd.pid the root:root is back the owner of this file.

Do I need more owner assigenments or additional settings in a config-file?

[adi]

Hello,

Please post the output of the following command in order to further analyze the situation:

ps aux | grep -i spam

Best regards,