[Dovecot] 1.2.3 - fchown failed messages

Rob Mangiafico rmang at lexiconn.com
Wed Aug 5 04:52:41 EEST 2009


On Tue, 4 Aug 2009, Timo Sirainen wrote:
> On Tue, 2009-08-04 at 19:53 -0400, Rob Mangiafico wrote:
>>> What permissions does /var/spool/mail/john have? I guess mail group has
>>> read permissions? Just removing that should fix the error.
>>
>> -rw-rw----  1 john mail 5676767 Aug  4 19:50 /var/spool/mail/john
>>
>> Those are the default permissions that sendmail uses I believe. Not sure
>> if removing "mail" group r/w would have any other impact for
>> sendmail/procmail? Thanks for taking the time to help.
>
> It depends on your setup, but usually mail group shouldn't need read or
> write access to users' mails. Seems like a security risk to me in any
> case.

I agree. I removed the "rw" for the mail group for individual mbox 
mailboxes and no adverse effects from what I can tell. Thanks.

Rob


More information about the dovecot mailing list