public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed
From: "Michael Orlitzky" <mjo@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: mail-filter/spamassassin/, mail-filter/spamassassin/files/
Date: Thu, 24 Aug 2017 18:45:45 +0000 (UTC)	[thread overview]
Message-ID: <1503599192.8509fc8bb4d887a0a5ebf685d04508824165b6cd.mjo@gentoo> (raw)

commit:     8509fc8bb4d887a0a5ebf685d04508824165b6cd
Author:     Michael Orlitzky <mjo <AT> gentoo <DOT> org>
AuthorDate: Thu Aug 24 18:25:03 2017 +0000
Commit:     Michael Orlitzky <mjo <AT> gentoo <DOT> org>
CommitDate: Thu Aug 24 18:26:32 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8509fc8b

mail-filter/spamassassin: new revision to fix the systemd service.

As part of bug 590346, I accidentally broke the systemd service file
by starting the service as spamd:spamd when it needs to bind to port
783. Even when the service is run in the foreground, it needs to be
started as root; it will then drop privileges if given the --username
and --groupname flags. The new service file gets this right, with
root owning the main process and spamd:spamd the children.

Thanks to Dan Goodliffe for the report and help debugging the issue.

Gentoo-Bug: 590346

Package-Manager: Portage-2.3.6, Repoman-2.3.1

 .../files/{spamassassin.service-r2 => spamassassin.service-r3}        | 4 +---
 .../{spamassassin-3.4.1-r15.ebuild => spamassassin-3.4.1-r16.ebuild}  | 2 +-
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/mail-filter/spamassassin/files/spamassassin.service-r2 b/mail-filter/spamassassin/files/spamassassin.service-r3
similarity index 66%
rename from mail-filter/spamassassin/files/spamassassin.service-r2
rename to mail-filter/spamassassin/files/spamassassin.service-r3
index 80320571784..6bc74c46cc5 100644
--- a/mail-filter/spamassassin/files/spamassassin.service-r2
+++ b/mail-filter/spamassassin/files/spamassassin.service-r3
@@ -3,10 +3,8 @@ Description=Spamassassin daemon
 After=network.target
 
 [Service]
-ExecStart=/usr/sbin/spamd $SPAMD_OPTS
+ExecStart=/usr/sbin/spamd --username=spamd --groupname=spamd $SPAMD_OPTS
 ExecReload=/bin/kill -HUP $MAINPID
-User=spamd
-Group=spamd
 
 [Install]
 WantedBy=multi-user.target

diff --git a/mail-filter/spamassassin/spamassassin-3.4.1-r15.ebuild b/mail-filter/spamassassin/spamassassin-3.4.1-r16.ebuild
similarity index 99%
rename from mail-filter/spamassassin/spamassassin-3.4.1-r15.ebuild
rename to mail-filter/spamassassin/spamassassin-3.4.1-r16.ebuild
index 47d77f361f7..3273f6b1706 100644
--- a/mail-filter/spamassassin/spamassassin-3.4.1-r15.ebuild
+++ b/mail-filter/spamassassin/spamassassin-3.4.1-r16.ebuild
@@ -158,7 +158,7 @@ src_install () {
 	newinitd "${FILESDIR}/3.4.1-spamd.init-r1" spamd
 	newconfd "${FILESDIR}/3.4.1-spamd.conf" spamd
 
-	systemd_newunit "${FILESDIR}/${PN}.service-r2" "${PN}.service"
+	systemd_newunit "${FILESDIR}/${PN}.service-r3" "${PN}.service"
 	systemd_install_serviced "${FILESDIR}/${PN}.service.conf-r1" \
 							 "${PN}.service"
 


             reply	other threads:[~2017-08-24 18:45 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-08-24 18:45 Michael Orlitzky [this message]
  -- strict thread matches above, loose matches on Subject: below --
2024-10-30 22:47 [gentoo-commits] repo/gentoo:master commit in: mail-filter/spamassassin/, mail-filter/spamassassin/files/ Andreas K. Hüttel
2024-06-03  1:31 Sam James
2023-06-25 19:22 Sam James
2023-01-05  5:21 Sam James
2022-12-27 11:40 Sam James
2022-11-19 23:37 Sam James
2020-06-20 20:31 Thomas Deutschmann
2019-03-31 18:50 Michael Orlitzky
2018-12-11 10:19 Mikle Kolyada
2018-03-17 22:48 Michał Górny
2017-12-05 18:48 Michael Orlitzky
2017-11-01 18:55 Michael Orlitzky
2017-08-20 14:35 Michael Orlitzky
2017-08-04 20:57 Michael Orlitzky
2016-06-03 16:04 Michael Orlitzky
2016-04-26 22:27 Austin English

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1503599192.8509fc8bb4d887a0a5ebf685d04508824165b6cd.mjo@gentoo \
    --to=mjo@gentoo.org \
    --cc=gentoo-commits@lists.gentoo.org \
    --cc=gentoo-dev@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox