FS#35627 - [postfix] postqueue and postdrop binaries not setgid postdrop in 2.10.0-6
Attached to Project:
Arch Linux
Opened by Simon Perry (pezz) - Tuesday, 04 June 2013, 01:16 GMT
Last edited by Gaetan Bisson (vesath) - Monday, 02 March 2015, 17:13 GMT
Opened by Simon Perry (pezz) - Tuesday, 04 June 2013, 01:16 GMT
Last edited by Gaetan Bisson (vesath) - Monday, 02 March 2015, 17:13 GMT
|
Details
Description:
After updating to 2.10.0-6 the postqueue and postdrop binaries are not setgid to the postdrop group. 2.10.0-5: -rwxr-sr-x 1 root postdrop 250928 May 11 05:08 /usr/sbin/postqueue -rwxr-sr-x 1 root postdrop 197376 May 11 05:08 /usr/sbin/postdrop 2.10.0-6: -rwxr-xr-x 1 root root 250928 May 31 00:20 /usr/bin/postqueue -rwxr-xr-x 1 root root 197376 May 31 00:20 /usr/bin/postdrop This affects access to maildrop and public dirs under /var/spool/postfix (although delivery is still fine if, like my setup, mail is handed off to something like procmail -- so I'm not sure how problematic this is for other delivery types). Additional info: * package version(s): 2.10.0-6 * config and/or log files etc. Warnings from journalctl: Jun 04 10:38:15 arch postfix/postfix-script[503]: warning: not owned by group postdrop: /usr/sbin/postqueue Jun 04 10:38:15 arch postfix/postfix-script[504]: warning: not owned by group postdrop: /usr/sbin/postdrop Jun 04 10:38:15 arch postfix/postfix-script[506]: warning: not set-gid or not owner+group+world executable: /usr/sbin/postqueue Jun 04 10:38:15 arch postfix/postfix-script[507]: warning: not set-gid or not owner+group+world executable: /usr/sbin/postdrop Steps to reproduce: Upgrade to 2.10.0-6 |
This task depends upon
command_directory = /usr/sbin
You should be able to override it in post_install, much like it's done for daemon_directory.
There's also a newer bug report (
FS#35640) which points out the following upgrade errors:/usr/lib/postfix/post-install: line 413: /usr/sbin/postconf: No such file or directory
/usr/lib/postfix/post-install: line 420: /usr/sbin/postconf: No such file or directory
I'll push an updated postfix to [extra] soon.
i know this is supposed to be done in /usr/lib/postfix/postinstall but it doesnt (and i cant find no reason).