I've fixed this issue and wanted to get back for any else that might stumble 
upon this.

Using `logger -p mail.err "$(id)"` in the sieve bash script I found out that 
the groups for dovecot:dovecot didn't include all groups as set in /etc/group. 
Apparently Dovecot doesn't respect the system's group memberships (probably due 
to security?) and instead requires you to set it explicitly using the 
`mail_access_groups` variable. E.g. this works in accessing 
/var/run/rspamd/rspamd-controller.sock owned by _rspamd:_rspamd and permissions 
660 (the execute bit doesn't do anything for sockets, so it is effectively the 
same as 770):

conf.d/10-mail.conf
```
mail_uid = dovecot
mail_gid = dovecot
mail_access_groups = _rspamd
first_valid_uid = 97
```
_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Reply via email to