Doh. Of course.... knew it would be something obvious. What threw me is that it had correct permissions aside from this.
It's being called by postfix with -d through mailbox_command - I'm digging through postfix config now, if there's a way I can do this without making deliver setuid I'd be much happier....
Thanks, Timo,
Peter.
-----Original Message----- From: dovecot-bounces+dovecot=peter-b.org@dovecot.org [mailto:dovecot-bounces+dovecot=peter-b.org@dovecot.org] On Behalf Of Timo Sirainen Sent: 16 November 2009 18:07 To: Peter Cc: 'Dovecot Mailing List' Subject: Re: [Dovecot] deliver is ignoring mail_access_groups
On Sun, 2009-11-15 at 12:59 +0000, Peter wrote:
Opening the permissions on /home/mail (6771) allows deliver to succeed suggesting that mail_access_groups is being ignored by deliver.
How are you calling deliver? Either it needs to be started up as root, or you need to make it setuid-root (and call it with -d parameter). Otherwise it can't use mail_access_groups.