From owner-freebsd-ports@FreeBSD.ORG Mon Nov 10 10:57:42 2014 Return-Path: Delivered-To: freebsd-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BB45F973; Mon, 10 Nov 2014 10:57:42 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3B08E10F; Mon, 10 Nov 2014 10:57:42 +0000 (UTC) Received: from [10.6.25.100] ([213.61.170.110]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0M08eS-1Y8btm3DqO-00uMGH; Mon, 10 Nov 2014 11:57:30 +0100 Message-ID: <54609A1A.9020504@gmx.de> Date: Mon, 10 Nov 2014 11:57:30 +0100 From: olli hauer User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: Matthew Seaman Subject: Re: postfix catch-22... References: <54608CF8.4000301@freebsd.org> In-Reply-To: <54608CF8.4000301@freebsd.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:B9eBUpBA9QxIwPmsbtN68GGhwZQ5yMNjWuao8+/FGjQeSRtqz6r G7iaBgoUxkYtvJv6BOrOlVItNP7Nl27yZYHXLft22MMPBvJuqNZaM3TQ8ArocJdUSKMYZbp KFof3ej8HGcN9Xg5LOZUp1ei7e8gtoN/8I/AA4j2neOhgXglymZJFDTzdzV0ibp4v6GwSeN UWEBdRA94r4Ai9jD4WyoQ== X-UI-Out-Filterresults: notjunk:1; Cc: freebsd-ports@FreeBSD.org, sahil@FreeBSD.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Nov 2014 10:57:42 -0000 On 2014-11-10 11:01, Matthew Seaman wrote: > > Dear maintainer, > > Had an issue with updating from 2.11.1_4,1 to 2.11.3_1,1: it looks like > you can't win with the ownership of /var/spool/postfix: > > On restart after updating the package: > > {{{ > smtp-2:/var/spool/postfix:# service postfix restart > postfix/postfix-script: stopping the Postfix mail system > postsuper: fatal: scan_dir_push: open directory defer: Permission denied > postfix/postfix-script: fatal: Postfix integrity check failed! > }}} > > Googling shows this to be a problem with the ownership of > /var/spool/postfix. One 'chown postfix /var/spool/postfix' later, and > postfix will now at least start, but it clearly isn't happy about it. > > {{{ > smtp-2:/var/spool/postfix:# chown postfix . > smtp-2:/var/spool/postfix:# service postfix restart > postfix/postfix-script: fatal: the Postfix mail system is not running > postfix/postfix-script: warning: not owned by root: /var/spool/postfix > postfix/postfix-script: starting the Postfix mail system > }}} > > {{{ > smtp-2:/var/spool/postfix:# postfix check > postfix/postfix-script: warning: not owned by root: /var/spool/postfix > smtp-2:/var/spool/postfix:# ls -ld /var/spool/postfix > drwx------ 16 postfix postfix 16 Nov 10 00:27 /var/spool/postfix/ > }}} > > It seems from the pkg-plist that postfix:postfix and 0700 are the > intended ownership and permissions: > > https://svnweb.freebsd.org/ports/head/mail/postfix/pkg-plist?r1=372370&r2=372369&pathrev=372370 > > However updating via pkg(8) didn't seem to pick up the ownership change > on /var/spool/postfix -- it got the chmod to 0700 though. > > pkg(8) not behaving quite right aside, I'm not convinced that > postfix:postfix and 0700 is correct for /var/spool/postfix -- it used to > be root:postfix and move 0755, which seems to allow postfix to run > without complaint: > > {{{ > smtp-2:/var/spool/postfix:# chmod 755 . > smtp-2:/var/spool/postfix:# chown root . > smtp-2:/var/spool/postfix:# postfix check > smtp-2:/var/spool/postfix:# service postfix restart > postfix/postfix-script: stopping the Postfix mail system > postfix/postfix-script: starting the Postfix mail system > }}} > > Cheers, > > Matthew Arg, an leftover from my tests to fix the permissions ... This should by fixed in svn rev. 372388, thanks for the note! -- olli