File permissions

[Aki Tuomi]

> On 08 January 2019 at 19:39 Rupert Gallagher via dovecot <dovecot at dovecot.org> wrote:
> 
> 
> Hello,
> 
> I am mosty done with the upgrade, but there is a problem that keeps me awake at night: file ownership and permissions.
> 
> It would be most helpful to have the following from Aki's live system:
> 
> ls -halFR /var/run/dovecot

My live config uses dovecot defaults as much as possible, since these are usually correct. I only have three unix listeners configured, one for postfix authentication and

service old-stats {
  fifo_listener old-stats-mail {
    mode = 0666
  }
}

service stats {
  unix_listener stats-writer {
    mode = 0666
  }
}

thus:

/var/run/dovecot:
total 8.0K
drwxr-xr-x  5 root    root     860 Dec  2 11:31 ./
drwxr-xr-x 25 root    root     920 Jan  8 19:59 ../
srw-------  1 root    root       0 Dec  2 11:31 anvil=
srw-------  1 root    root       0 Dec  2 11:31 anvil-auth-penalty=
srw-------  1 dovecot root       0 Dec  2 11:31 auth-client=
srw-------  1 dovecot root       0 Dec  2 11:31 auth-login=
srw-------  1 root    root       0 Dec  2 11:31 auth-master=
-rw-------  1 root    root      32 Jun 27  2018 auth-token-secret.dat
srw-rw-rw-  1 dovecot root       0 Dec  2 11:31 auth-userdb=
srw-------  1 dovecot root       0 Dec  2 11:31 auth-worker=
srw-------  1 root    root       0 Dec  2 11:31 config=
srw-rw----  1 root    dovecot    0 Dec  2 11:31 dict=
srw-rw----  1 root    dovecot    0 Dec  2 11:31 dict-async=
srw-------  1 root    root       0 Dec  2 11:31 director-admin=
srw-rw-rw-  1 root    root       0 Dec  2 11:31 dns-client=
srw-------  1 root    root       0 Dec  2 11:31 doveadm-server=
lrwxrwxrwx  1 root    root      25 Dec  2 11:31 dovecot.conf -> /etc/dovecot/dovecot.conf
drwxr-xr-x  2 root    root      40 Jun 27  2018 empty/
srw-rw----  1 root    dovecot    0 Dec  2 11:31 imap-hibernate=
srw-------  1 root    root       0 Dec  2 11:31 imap-master=
srw-rw-rw-  1 root    root       0 Dec  2 11:31 imap-urlauth=
srw-------  1 dovecot root       0 Dec  2 11:31 imap-urlauth-worker=
srw-rw-rw-  1 root    root       0 Dec  2 11:31 indexer=
srw-------  1 dovecot root       0 Dec  2 11:31 indexer-worker=
srw-------  1 dovecot root       0 Dec  2 11:31 ipc=
srw-rw-rw-  1 root    root       0 Dec  2 11:31 lmtp=
srw-------  1 root    root       0 Dec  2 11:31 log-errors=
drwxr-x---  2 root    dovenull 100 Dec  2 11:31 login/
srw-------  1 root    root       0 Dec  2 11:31 master=
-rw-------  1 root    root       6 Dec  2 11:31 master.pid
srw-------  1 root    root       0 Dec  2 11:31 old-stats=
prw-rw-rw-  1 root    root       0 Jan  8 20:02 old-stats-mail|
prw-------  1 root    root       0 Jan  8 19:57 old-stats-user|
srw-------  1 root    root       0 Dec  2 11:31 replication-notify=
prw-------  1 root    root       0 Dec  2 11:31 replication-notify-fifo|
srw-------  1 dovecot root       0 Dec  2 11:31 replicator=
srw-rw-rw-  1 root    root       0 Jul 25 09:07 ssl-params=
srw-------  1 root    root       0 Jul 25 09:07 stats=
prw-rw-rw-  1 root    root       0 Sep 23 15:50 stats-mail|
srw-------  1 root    root       0 Dec  2 11:31 stats-reader=
prw-------  1 root    root       0 Sep 23 15:18 stats-user|
srw-rw-rw-  1 root    dovecot    0 Dec  2 11:31 stats-writer=
drwxr-x---  2 root    dovenull  80 Dec  2 11:31 token-login/

Aki