[Dovecot] fchown error upgrading from 0.99 to 1.2
Hi there, after upgrading from 0.99 to 1.2, the following errors appear in the error log: Mar 09 15:50:23 POP3(cwchbodega): Error: fchown(/home/cwchbodega/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=653(cwchbodega), group based on /var/mail/cwchbodega) Mar 09 15:50:53 POP3(cwchbodega): Error: fchown(/home/cwchbodega/mail/.imap/INBOX/dovecot.index.tmp, -1, 12(mail)) failed: Operation not permitted (egid=653(cwchbodega), group based on /var/mail/cwchbodega) Mar 09 15:50:53 POP3(cwchbodega): Error: fchown(/home/cwchbodega/mail/.imap/INBOX/dovecot.index.cache.lock, -1, 12(mail)) failed: Operation not permitted (egid=653(cwchbodega), group based on /var/mail/cwchbodega)
As I check the perms on the files, i see that: /var/mail/cwchbodega -rw-rw---- 1 cwchbodega mail
and /home/cwchbodega/mail/.imap/INBOX/ [root@mail INBOX]# ls -la /home/cwchbodega/mail/.imap/INBOX/ total 280 drwx------ 2 cwchbodega cwchbodega 4096 Mar 9 15:50 . drwx------ 3 cwchbodega cwchbodega 4096 Dec 4 00:40 .. -rw------- 1 cwchbodega cwchbodega 5 Dec 4 00:40 .customflags -rw------- 1 cwchbodega cwchbodega 17312 Mar 9 15:50 dovecot.index -rw------- 1 cwchbodega cwchbodega 26624 Mar 9 15:56 dovecot.index.cache -rw------- 1 cwchbodega cwchbodega 26128 Mar 9 15:56 dovecot.index.log -rw------- 1 cwchbodega cwchbodega 17016 Mar 9 08:43 .imap.index -rw------- 1 cwchbodega cwchbodega 143422 Mar 6 08:54 .imap.index.data -rw------- 1 cwchbodega cwchbodega 7696 Feb 22 08:26 .imap.index.log -rw------- 1 cwchbodega cwchbodega 13028 Mar 6 08:54 .imap.index.tree [root@mail INBOX]#
Should I chown user:mail the contents of the INBOX folder? and use perms of 0600 ?
thanks,
--
Erick Perez Cel +(507) 6675-5083
On 9.3.2010, at 23.00, Erick Perez wrote:
Mar 09 15:50:23 POP3(cwchbodega): Error: fchown(/home/cwchbodega/mail/.imap/INBOX/dovecot.index.log.newlock, -1, 12(mail)) failed: Operation not permitted (egid=653(cwchbodega), group based on /var/mail/cwchbodega) .. As I check the perms on the files, i see that: /var/mail/cwchbodega -rw-rw---- 1 cwchbodega mail
Most likely you don't really need this file to be group-rw by mail. It's most likely just a potential security hole. The error goes away with:
chmod 0600 /var/mail/*
Maybe I just start bugging again those shadow-utils people to make 0600 the default instead of 0660.
participants (2)
-
Erick Perez
-
Timo Sirainen