Bug ID 917983
Summary postqueue and postdrop binaries not setgid maildrop for 13.2 and Raspberry Pi (ARM)
Classification openSUSE
Product openSUSE Distribution
Version 13.2
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Network
Assignee bnc-team-screening@forge.provo.novell.com
Reporter freek@opensuse.org
QA Contact qa-bugs@suse.de
CC bpoirier@suse.com, bugzilla_opensuse@ojkastl.de, bwiedemann@suse.com, ecsos@schirra.net, meissner@suse.com, mpluskal@suse.com, noga.dany@gmail.com, schuetzm@gmx.net, vovochka13@gmail.com
Depends on 899471
Found By ---
Blocker ---

+++ This bug was initially created as a clone of Bug #899471 +++

I am also experiencing on openSUSE 13.2 for Raspberry Pi more or less what is
described here:

https://bugs.archlinux.org/task/35627

Local mail sending by regular users does not work, the journal contains:
cron[1893]: postdrop: warning: mail_queue_enter: create file
maildrop/463330.14336: Permission denied
postfix/postdrop[14336]: warning: mail_queue_enter: create file
maildrop/463330.14336: Permission denied
cron[1893]: postdrop: warning: mail_queue_enter: create file
maildrop/606362.15354: Permission denied
postfix/postdrop[15354]: warning: mail_queue_enter: create file
maildrop/606362.15354: Permission denied

In our case, the binaries should be owned by the group maildrop instead of
postfix (as in the Arch Linux report), according to:

root@f1:~# postfix check
postfix/postfix-script: warning: not owned by group maildrop:
/usr/sbin/postqueue
postfix/postfix-script: warning: not owned by group maildrop:
/usr/sbin/postdrop
postfix/postfix-script: warning: not set-gid or not owner+group+world
executable: /usr/sbin/postqueue
postfix/postfix-script: warning: not set-gid or not owner+group+world
executable: /usr/sbin/postdrop

Manually applying these ownership/mode changes works around the problem.

ben@f1:~$ rpm -qi postfix
Name        : postfix
Version     : 2.11.0
Release     : 7.1
Architecture: x86_64
Install Date: Thu 18 Sep 2014 04:26:41 AM PDT
Group       : Productivity/Networking/Email/Servers
[...]


You are receiving this mail because: