Dovecot LMTP tries to access a directory of a different user, than the one it actually changed to.

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 3 Jul 2015, Ernest Deak wrote:

> Hello, I encountered a problem when trying to send an email to multiple 
> recipients.

> Jul  3 12:34:57 dhcp90 dovecot: lmtp(24106, tester): Error: 
> stat(/home/han.solo/mail/.imap/INBOX/dovecot.index.log) failed: Permission 
> denied (euid=802(tester) egid=800(kerber) missing +x perm: /home/han.solo, 
> euid is not dir owner)
> Jul  3 12:34:57 dhcp90 dovecot: lmtp(24106, tester): Error: 
> open(/home/han.solo/mail/.imap/INBOX/dovecot.index) failed: Permission denied 
> (euid=802(tester) egid=800(kerber) missing +x perm: /home/han.solo, euid is 
> not dir owner)
> Jul  3 12:34:57 dhcp90 dovecot: lmtp(24106, tester): 70NxN1FlllUqXgAA0vrzwA: 
> msgid=<55966551.IfKOMu/T0WTB9M5x%vader at dhcp90.#####>: save failed to 
> INBOX: BUG: Unknown internal error

> My MTA is sendmail
> I am using dovecot-lmtp for local delivery
> Mailbox format is mbox
> Configured managesieve plugin to listen on 4190. (not sure if this is even 
> related but it might)
>
> The problem I see is that lmtp(user1) tries to access the home directory 
> /home/user2 and I cannot figure out the reason why.
> This only happens when sending mails to multiple recipients.

> I see the that lmtp complains that it doesn't have execute permissions. But I 
> don't want to place execute permissions for others on the entire /home/* dir 
> structure.

as far as I remember there had been (or is) a bug in Dovecot, that 
privilegues are not changed correctly when delivering to another user. If 
that's the case, limit the number of recipients per LMTP message to 1, see 
r= field in mailer definition in op.me.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBVZaJdHz1H7kL/d9rAQJrBAf/XYV/Pma3MEyZsyk90g/llcRbXK4kn84J
IopHII8l82XPGZKBsaaEp3hkNn+hKkNxwPpLXD57Ny5rM9fAZkYrvW/ZPBZ6pFoQ
htMF5VXkpZ9i99ftCMGo4KmpbJC1cpmnTluxJvKclgjzwRLWfCdhuRH51YnAhinM
8dItrRyrv/5H0T8HeIQi9QSQPdquCiuY8RVQvos+6dClb3XEKAjyRwmjs0SRgoI2
Zqewwls6UbaXbgDqA+2umySRjHh8lQsIWg4DFcSigH3vE7XuYdruphbsHdY7Ssib
nT/l3WhrjjdXEoAzTPZgmorzP7/e/NM9rYZxNxgopht4YDBPX1/CYA==
=JYrh
-----END PGP SIGNATURE-----