Package: opendkim Version: 2.10.3-5 Severity: normal It may be that this is not technically a bug, but I recently upgraded opendkim and encountered some mildly tricky problems. I perhaps should not have simply kept my existing /etc/default/opendkim, but having done that, it was missing settings for RUNDIR and PIDFILE. This caused /lib/opendkim/opendkim.service.generate to generate a bad /lib/systemd/system/opendkim.service . If the upgrade process won't offer to fix up my /etc/default/opendkim, I think opendkim.service.generate should at least raise an error if a required setting is missing from the configuration file.
-- System Information: Debian Release: stretch/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.5.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages opendkim depends on: ii adduser 3.115 ii dns-root-data 2015052300+h+1 ii init-system-helpers 1.42 ii libbsd0 0.8.3-1 ii libc6 2.24-2 ii libdb5.3 5.3.28-12 ii libldap-2.4-2 2.4.42+dfsg-2+b2 ii liblua5.1-0 5.1.5-8.1 ii libmemcached11 1.0.18-4.1 ii libmemcachedutil2 1.0.18-4.1 ii libmilter1.0.1 8.15.2-4 ii libopendbx1 1.4.6-10 ii libopendkim10 2.10.3-5 ii librbl1 2.10.3-5 ii libssl1.0.2 1.0.2h-1 ii libunbound2 1.5.9-3 ii libvbr2 2.10.3-5 ii lsb-base 9.20160629 opendkim recommends no packages. Versions of packages opendkim suggests: ii opendkim-tools 2.10.3-5 pn unbound <none> -- Configuration Files: /etc/default/opendkim changed: RUNDIR=/var/spool/postfix/var/run/opendkim SOCKET="local:/var/spool/postfix/opendkim/opendkim.sock" USER=opendkim GROUP=opendkim PIDFILE=$RUNDIR/$NAME.pid EXTRAAFTER= /etc/dkimkeys/README.PrivateKeys [Errno 13] Permission denied: u'/etc/dkimkeys/README.PrivateKeys' /etc/opendkim.conf changed: Syslog yes UMask 002 Canonicalization relaxed/relaxed SubDomains yes OversignHeaders From TrustAnchorFile /usr/share/dns/root.key AutoRestart Yes AutoRestartRate 10/1h LogWhy Yes ExternalIgnoreList refile:/etc/opendkim/TrustedHosts InternalHosts refile:/etc/opendkim/TrustedHosts KeyTable refile:/etc/opendkim/KeyTable SigningTable refile:/etc/opendkim/SigningTable Socket local:/var/spool/postfix/opendkim/opendkim.sock Statistics /var/log/opendkim/dkim-stats SignatureAlgorithm rsa-sha256 -- no debconf information

