On Sat, 2022-01-01 at 13:35 -0500, Wietse Venema wrote:
> Ken Wright:
> 
> - Does the socket /var/spool/postfix/public/showq exist? It
>   should look like this:
> 
>   srw-rw-rw- 1 postfix postfix 0 Dec 17 18:13
> /var/spool/postfix/public/showq

Looks just like this, except that it's the postdrop group.

>  Is the showq service defined in master.cf? It should look like this:
> 
>   showq     unix  n       -       ...     -       -       showq
> 
>   Note that the third column must be 'n'.

It is, but the fifth column is a y.  I see you have an ellipsis in the
fifth column; does that mean "doesn't matter"?

>   Is the postqueue command subject to AppArmor reduced privileges?
>   The postqueue command will log EACES (Permission denied) errors,
>   but when AppArmor returns a different error code such as EPERM,
>   postqueue will just say "mail system is down" (it does not try
>   to evaluate every possible error code).

AppArmor 2.13.3 is installed, but I'm not familiar with it.  How would
I check to see if it has reduced privileges?

>   I have updated Postfix 3.7 and added EPERM to the list of expected
>   permission errors.
> 
> - Is there more than one Postfix configuration on the machine? In
>   that case the postqueue command may have been looking at a
> different
>   Postfix configuration than the one that you were looking at.

No, just the one.

Thank you for the prompt response and helpful suggestions!  (not snark,
real gratitude.)

Ken

Reply via email to