Re: [Dovecot] [Dovecot-news] Security issue #5: mail_extra_groups setting is often used insecurely

On Tue, 2008-03-04 at 17:31 +0100, Jérémie Bouttier wrote:

...

a) Upgrade to v1.0.11 and use the new mail_privileged_group setting instead of mail_extra_groups.

We tried this but now the mail.log has a number of lines : « dovecot: IMAP(someuser): open(/var/mail/.temp.XXXX) failed: Permission denied »

Oh, this is actually harmless. You can get rid of it (and improve the performance) by setting dotlock_use_excl=yes.

But maybe I should release v1.0.12 anyway with that error message silenced..