On Mar 9, 2008, at 7:46 AM, Timo Sirainen wrote:

G518X2:~/Temp/dovecot-1.1.rc2 root# dovecot -F
Fsetregid(65534,6) failed with euid=0: Operation not permitted

And this happens with rc3 too? It's working in my Leopard at least.. I don't see why setregid() would fail since it's still running as root (euid=0). Maybe this is a Tiger-problem that's been fixed since.

Try switching mail_drop_priv_before_exec setting? It might help, or maybe not.

Just compiled and installed rc3. Tried with and without mail_drop_priv_before_exec setting. Still get...

G518X2:~/Temp/dovecot-1.1.rc3 root# dovecot -F
Fsetregid(65534,6) failed with euid=0: Operation not permitted
Error: imap dump-capability process returned 89
Fatal: Invalid configuration in /usr/local/etc/dovecot.conf

Relevant portion of dovecot.conf:

# Group to enable temporarily for privileged operations. Currently this is # used only for creating mbox dotlock files when creation fails for INBOX.
# Typically this is set to "mail" to give access to /var/mail.
mail_privileged_group = mail

# Grant access to these supplementary groups for mail processes. Typically # these are used to set up access to shared mailboxes. Note that it may be # dangerous to set these if users can create symlinks (e.g. if "mail" group is # set here, ln -s /var/mail ~/mail/var could allow a user to delete others' # mailboxes, or ln -s /secret/shared/box ~/mail/mybox would allow reading it).
#mail_access_groups = mail


B. Bodger
New York, NY

Reply via email to