Just back from NZ and did as suggested.

Three problems showed up - missing dict_ldap library - as we don't use LDAP I don't think this matters.
Localtime differed from the /etc/localtime - not sure why, but copying 
the file from /etc seemed to solved the problem.
The version of libgcc_s in the spool files system differed from the 
/lib/x86_64-linux-gnu version again not sure why. I assume that this is 
because I have applied updates to the base system. Again copied the 
latest version into /spool/postfix... solved the problem.
Everything appears to be working OK.

Thanks for the help.


On 2016-02-24 6:22 AM, Wietse Venema wrote:
John A @ KLaM:
Recently there was a discussion about file permissions and ownership.
My postfix setup is as far as I know fairly conventional Debian stretch.
Run "postfix set-permissions", then "postfix check", and fix any
permission problems that it reports.

If any of those commands abort, file a bug with the maintainer.

Would I be better with directories as 750
and files as 640.
That may break mail submission with /usr/sbin/sendmail, depending
on how things are configured.

Ownership = postfix in all cases.
NO, THAT WOULD BE A TERRIBLE MISTAKE. Many Postfix programs run
with root privileges (most of them temporarily, some permanently)
and therefore, their configuration files/directories MUST NOT be
writable by non-root processes. That includes /var/spool/postfix.

        Wietse


Reply via email to