I can also confirm this, on my own mail server since upgrading to beta1. Dovecot always makes the base_dir world-writable on startup.

----- Forwarded message from Oleg Safiullin <form@pdp-11.org.ru> -----

Date: Fri, 20 Jan 2006 07:09:17 +0600 From: Oleg Safiullin <form@pdp-11.org.ru> To: brad@openbsd.org Subject: dovecot 1.0beta1

Hi. After update dovecot to 1.0beta1 some strange thing happens -- during startup it says "fixing permissions for /var/dovecot to make it world-readable", but actually it makes it world-writable. Please look at it.

WBR //form

----- End forwarded message -----