deliver has suid:
-rwsr-xr-x 1 root root 1892044 Jan 5 19:21 deliver
Jan 5 23:11:02 vds5 deliver(admin@domain.com): [ID 702911 mail.error] stat(/var/mail/apps/domain.com/admin/Maildir/tmp) failed: Permission denied
The above mentioned directory has these permissions:
drwx------ 3 vmail vmail 3 Jan 5 19:15 /var/mail/apps drwx------ 3 vmail vmail 3 Jan 5 19:15 /var/mail/apps/domain.com drwx------ 3 10001 10001 3 Jan 5 19:25 /var/mail/apps/domain.com/admin drwx------ 6 10001 10001 9 Jan 5 23:05 /var/mail/apps/domain.com/admin/Maildir/ drwx------ 2 10001 10001 2 Jan 5 19:03 /var/mail/apps/domain.com/admin/Maildir/tmp
It seems deliver needs the /var/mail/apps and the /var/mail/apps/domain.com to be 755. Can Dovecot do this automatically when it creates these directories? (/var/mail/apps, /var/mail/apps/domain.com)