Package: fetchmail
Version: 6.3.26-1+b1
Severity: normal

Dear Maintainer,

-- Brief:

fetchmail creates the file `~/.fetchids` with -rw-rw---- (0660) permissions and 
then complains afterwards that the file must not have more than -rwx----- 
(0700).

-- Observed Behaviour:

On every run fetchmail set the permissions of `~/.fetchids` to 660. On
the next run of fetchmail (if fetchmail runs successfully before), it
complains that the permissions of `~/.fetchids` must not have more then
700 and exits.

-- Expected Behaviour:

fetchmail should not touch the file properties of `~/.fetchids` and
create it with 600, if it not exists yet.

-- Reproduce:

You need a pop3 server which requires the `~/.fetchids` file.

All following commands are issued with the same non-admin user (here
`raab`) in a defaulted bash shell.

My `~/.fetchmailrc` files looks as follows:

    set postmaster raab

    set bouncemail

    poll pop3.kabelmail.de with proto POP3
            user "--REMOVED--" there with password
            "--REMOVED--" options ssl keep

For the server pop3.kabelmail.de fetchmail requires an `~/.fetchids`
file. fetchmail creates the file with 660 permissions and fill it with
appropriate data.

If you call fetchmail again it checks the permissions of the
`~/.fetchids` file and complains:

    File /home/raab/.fetchids must have no more than -rwx------ (0700) 
permissions.

The command aborts with an error return.

If you then set

    chmod 600 ~/.fetchids

and then run fetchmail again, it runs fine like expected.
But the file `~/.fetchids` has then again 660 permissions. Therefore, 
`~/.fetchids` is created again -- even if exists already -- by fetchmail or the 
permissions are always set to 660 anywhere after the check of the file 
permissions.
Hence, if you now run fetchmail again, it complains again about wrong file 
permissions.
Thus you can run fetchmail regulary (e.g. cron) only with:

    /usr/bin/fetchmail; chmod 600 $HOME/.fetchids


-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (110, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages fetchmail depends on:
ii  adduser           3.113+nmu3
ii  debianutils       4.4+b1
ii  libc6             2.19-18+deb8u4
ii  libcomerr2        1.42.12-1.1
ii  libgssapi-krb5-2  1.12.1+dfsg-19+deb8u2
ii  libkrb5-3         1.12.1+dfsg-19+deb8u2
ii  libssl1.0.0       1.0.1t-1+deb8u2
ii  lsb-base          4.1+Debian13+nmu1

Versions of packages fetchmail recommends:
ii  ca-certificates  20141019+deb8u1

Versions of packages fetchmail suggests:
pn  fetchmailconf                   <none>
ii  postfix [mail-transport-agent]  2.11.3-1
ii  resolvconf                      1.76.1

-- no debconf information

Reply via email to