Your message dated Sun, 3 Jan 2021 02:47:17 +0100
with message-id <[email protected]>
and subject line Re: Bug#893839: sqwebmail fix for cache login and right
permissions
has caused the Debian Bug report #893839,
regarding sqwebmail: the group and owner for /var/cache/sqwebmail are incorrect
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
893839: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893839
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sqwebmail
Version: 5.8.3+0.76.3-5
Severity: normal
Dear Maintainer,
Upon upgrading from devuan jessie to devuan Ascii (which is based on debian
stretch), I noticed messages like the following in /var/log/mail.log:
"Jan 31 12:30:56 vserver sqwebmaild: maildircache: Cache create failure - unable
to create file /var/cache/sqwebmail/210754/gr/greg."
I found that the default group and owner for /var/cache/sqwebmail was courier
and courier respectively. Changing the group and owner to bin and bin
respectively resolved this for me.
-- System Information:
Debian Release: 9
Architecture: amd64
(x86_64)
Kernel: Linux 4.9.0-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages sqwebmail depends on:
ii apache2 [httpd-cgi] 2.4.25-3+deb9u3
ii courier-authlib 0.66.4-9
ii courier-base 0.76.3-5
ii cron 3.0pl1-128+deb9u1
ii debconf [debconf-2.0] 1.5.61
ii expect 5.45-7+deb9u1
ii iamerican [ispell-dictionary] 3.4.00-5
ii ibritish [ispell-dictionary] 3.4.00-5
ii init-system-helpers 1.48+devuan2.0
ii ispell 3.4.00-5
ii libc6 2.24-11+deb9u3
ii libcourier-unicode1 1.4-3+b1
ii libfam0 2.7.0-17.2+b1
ii libgdbm3 1.8.3-14
ii libidn11 1.33-1
ii libldap-2.4-2 2.4.44+dfsg-5+deb9u1
ii libpcre3 2:8.39-3
ii maildrop 2.8.4-2
ii postfix [mail-transport-agent] 3.1.8-0+deb9u1
ii sysvinit-utils 2.88dsf-59.9+devuan2
Versions of packages sqwebmail recommends:
pn courier-pcp <none>
Versions of packages sqwebmail suggests:
ii courier-doc 0.76.3-5
ii gnupg 2.1.18-8~deb9u1
-- debconf information:
* sqwebmail/calendarmode: local
sqwebmail/install-www-backup: symlink
* sqwebmail/install-www: symlink
sqwebmail/dictionary: default
--- End Message ---
--- Begin Message ---
Control: tags -1 +wontfix
On 1/2/21 6:44 AM, PICCORO McKAY Lenz wrote:
as of /etc/cron.d/sqwebmail points.. the user that seems own the cache
directory of the sqwebmail is "bin"
Nonsense. On a fresh installation, that cache directory belongs to user
and group courier. That may have been a result from upgrading.
solution seems easy and no security will implicate here:
in sqwebmail.postinst line 68:
add_override courier bin 0770 /var/cache/sqwebmail
and in sqwebmail.prerm line 51:
del_override courier bin 0770 /var/cache/sqwebmail
Allowing a different group access does have security implications. And
is the wrong approach. Why would the bin group need access? That makes
no sense.
The right fix would have been to adjust ownership after the upgrade.
Either by a maintainer script (for which it is too late for stretch) or
manually (which probably is how this got fixed).
Regards
Markus
--- End Message ---
