Dear maintainer, Had an issue with updating from 2.11.1_4,1 to 2.11.3_1,1: it looks like you can't win with the ownership of /var/spool/postfix:
On restart after updating the package:
{{{
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: stopping the Postfix mail system
postsuper: fatal: scan_dir_push: open directory defer: Permission denied
postfix/postfix-script: fatal: Postfix integrity check failed!
}}}
Googling shows this to be a problem with the ownership of
/var/spool/postfix. One 'chown postfix /var/spool/postfix' later, and
postfix will now at least start, but it clearly isn't happy about it.
{{{
smtp-2:/var/spool/postfix:# chown postfix .
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: fatal: the Postfix mail system is not running
postfix/postfix-script: warning: not owned by root: /var/spool/postfix
postfix/postfix-script: starting the Postfix mail system
}}}
{{{
smtp-2:/var/spool/postfix:# postfix check
postfix/postfix-script: warning: not owned by root: /var/spool/postfix
smtp-2:/var/spool/postfix:# ls -ld /var/spool/postfix
drwx------ 16 postfix postfix 16 Nov 10 00:27 /var/spool/postfix/
}}}
It seems from the pkg-plist that postfix:postfix and 0700 are the
intended ownership and permissions:
https://svnweb.freebsd.org/ports/head/mail/postfix/pkg-plist?r1=372370&r2=372369&pathrev=372370
However updating via pkg(8) didn't seem to pick up the ownership change
on /var/spool/postfix -- it got the chmod to 0700 though.
pkg(8) not behaving quite right aside, I'm not convinced that
postfix:postfix and 0700 is correct for /var/spool/postfix -- it used to
be root:postfix and move 0755, which seems to allow postfix to run
without complaint:
{{{
smtp-2:/var/spool/postfix:# chmod 755 .
smtp-2:/var/spool/postfix:# chown root .
smtp-2:/var/spool/postfix:# postfix check
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: stopping the Postfix mail system
postfix/postfix-script: starting the Postfix mail system
}}}
Cheers,
Matthew
signature.asc
Description: OpenPGP digital signature
