[Bug 1273202] [NEW] policyd-spf runs as nobody

[Lukas Zronek]

Public bug reported:

Postfix is configured to execute policyd-spf as nobody rather than under
a separate user. This is bad practice and could be a security risk if
nobody is used by multiple daemons.

The attached patch fixes the problem only for people who install the
package for the first time and will not work if you do an upgrade. A
dedicated user account is already created during installation of
postfix-policyd-spf-python (1.0-1).

DistroRelease: Ubuntu 12.04.3 LTS
Package: amavisd-new-postfix 2.6.5-0ubuntu3.2

** Affects: amavisd-new (Ubuntu)
     Importance: Undecided
         Status: New

** Patch added: "amavisd-new-postfix.postinst.patch"
   https://bugs.launchpad.net/bugs/1273202/+attachment/3958897/+files/amavisd-new-postfix.postinst.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in Ubuntu.
https://bugs.launchpad.net/bugs/1273202

Title:
  policyd-spf runs as nobody

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/amavisd-new/+bug/1273202/+subscriptions