Sieve permissions issue following update

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 9 Dec 2014, David Gessel wrote:

> Global scripts were compiled:
>
> /usr/local/etc/dovecot/sieve # ls
> 10-move-spam.sieve      10-move-spam.svbin

> However, I ran sievec again and tried saving a modified script and got the same:

Actually this "ls" output and the last sentence does not indicate that the 
Sieve script had been compiled: a) after changing 10-move-spam.sieve _and_ 
b) after the upgrade with the new Sieve tools.

Did _you_ _manually_ run:

cd /usr/local/etc/dovecot/sieve
rm 10-move-spam.svbin
sievec -D 10-move-spam.sieve

? And, is the sievec command displaying the Pigeonhole version you have 
installed?

> -------- Original Message --------
> Subject: Re: Sieve permissions issue following update
> From: Pascal Volk <user+dovecot at localhost.localdomain.org>
> To: Dovecot Mailing List <dovecot at dovecot.org>
> Date: Tue Dec 09 2014 20:45:00 GMT+0300 (Arabic Standard Time)
>
>> On 12/09/2014 05:35 PM, David Gessel wrote:
>>> I recently updated dovecot and my sieve filters stopped working.  Checking the logs I see:
>>>
>>> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve: binary save: failed to create temporary file: open(/usr/local/etc/dovecot/sieve/10-move-spam.svbin.mailhost.domain.com.114.) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm: /usr/local/etc/dovecot/sieve, we're not in group 6(mail), dir owned by 143:6 mode=0775)
>>>
>>> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve: The LDA Sieve plugin does not have permission to save global Sieve script binaries; global Sieve scripts like `/usr/local/etc/dovecot/sieve/10-move-spam.sieve' need to be pre-compiled using the sievec tool
>>
>> As mentioned in the error message from your logs and in the wiki
>> <http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage#Manually_Compiling_Sieve_Scripts>:
>>
>> 	To mitigate this problem, the administrator must manually
>> 	pre-compile global scripts using the sievec command line tool.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBVIftyXz1H7kL/d9rAQLoLwf/bA1r7DR5AVxBUYT2R54eM8yALRJL3PLJ
IfZzIAaqeoZj5JtKR84F3ApDpLRYaLw2juXeEAELV+2GJXThDIEyLzbkhA3xwPOb
TViaaN1Htz3H+Scz3MDC/fxGAiNGNENGNj1GP4VJGM7DibrDOcd/pxePJjBvdKFS
YzhYxAng94UZqy23CZRvsbZiHnsh1ph2C3yXhxES3Ycvgg/ETBIz98DVTfJ74b4J
AEEUVnKIefWGun+WxWNgyI+p/aOSE3PyrHhmZx5ttgHhqU8KnmiKpWMaTUlpUmVb
U5ddZndFIERBfuDaGUdMsW0sDORJ/XswF6O/Gp3UF4NbFmNGQv8MZg==
=k9Fz
-----END PGP SIGNATURE-----