clements@desmond:/var/log$ ls -lda /var/mail drwxrwsr-x 2 root mail 4096 Nov 2 22:07 /var/mail
Best, John Clements On Tue, Nov 3, 2015 at 11:52 AM, Larry Rosenman <larry...@gmail.com> wrote: > what is the full permissions of /var/mail? > > > ls -lda /var/mail > > On Tue, Nov 3, 2015 at 1:49 PM, John Clements <johnbcleme...@gmail.com> > wrote: > >> I've been using dovecot+postfix happily for many years, and I'm now >> configuring it for a new machine. However, I'm running into an old problem >> again, and thinking that there must be a better solution. >> >> The problem is that dovecot-lda is unable to create dotlock files in the >> /var/mail directory. >> >> Dovecot version: 1:2.2.13-12~deb8u1 (I'm guessing this is upstream version >> 2.2.13) >> OS: Debian Jessie >> >> Currently, my mail directory has these permissions: >> >> clements@desmond:~$ ls -ld /var/mail >> drwxrwsr-x 2 root mail 4096 Nov 2 22:07 /var/mail >> clements@desmond:~$ ls -l /var/mail >> total 8 >> -rw------- 1 clements mail 1382 Nov 2 21:59 clements >> -rw------- 1 granitemon mail 530 Nov 2 22:07 granitemon >> >> I've added >> mail_privileged_group = mail >> to allow creation of the dotlock files. >> >> When I configure postfix to deliver using dovecot-lda, I get logs that >> look >> like this: >> >> Nov 3 11:12:20 desmond dovecot: lda(granitemon): Error: >> setegid(privileged) failed: Operation not permitted >> Nov 3 11:12:20 desmond dovecot: lda(granitemon): msgid=< >> 20151103181306.a4b5b5f...@desmond.xxxdomain.org>: save failed to INBOX: >> BUG: Unknown internal error >> >> In order to isolate the error, I took postfix out of the equation, and >> called dovecot-lda directly: >> >> clements@desmond:/tmp$ cat bogusmail >> From: cleme...@xxxdomain.org >> To: granitemon@localhost >> Date: November 3 2015 >> Subject: graaaah >> >> this is the body >> clements@desmond:/tmp$ /usr/lib/dovecot/dovecot-lda -e -d clements < >> bogusmail >> BUG: Unknown internal error >> clements@desmond:/tmp$ >> >> In response to this, mail.log now contains this similar error: >> >> Nov 3 11:34:57 desmond dovecot: lda(clements): msgid=unspecified: save >> failed to INBOX: BUG: Unknown internal error >> Nov 3 11:34:57 desmond dovecot: lda(clements): Error: setegid(privileged) >> failed: Operation not permitted >> >> >> I've tried a number of "random internet search" solutions, including >> - changing perms on mail files from 660 to 600 >> - enabling 'mail_access_groups=mail' in 10-mail.conf >> - adding individual users to the mail group. >> >> I guess I'm pretty confident that if dovecot is writing "BUG: Unknown >> internal error" in the logs, that this is is actually a bug in dovecot. >> >> OBresearch: I read through the release notes of 2.2.14 -- 2.2.19 to see if >> a relevant-looking bug had been fixed, but nothing jumped out at me. >> OBresearch: searching the dovecot mailing list, I found one *extremely* >> relevant thread called "Re: [Dovecot] started with dovecot sieve >> <http://dovecot.markmail.org/message/kgd34wberxuvmrsa?q=setegid>", but >> there didn't seem to be a solution contained in the thread. >> >> Final note: this doesn't appear to be confined to debian jessie: I took a >> look at my existing installation, and I see that in fact I just went ahead >> and made /var/mail world-writeable, which seems... sub-optimal. I'm sure I >> could do that here, too, but I'd certainly rather not. >> >> Thanks in advance, and let me know if I've left out relevant crucial >> information. >> >> Best, >> >> John Clements >> > > > > -- > Larry Rosenman http://www.lerctr.org/~ler > Phone: +1 214-642-9640 (c) E-Mail: larry...@gmail.com > US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961 >
