On Mon, 2009-04-13 at 15:48 -0700, James Butler wrote:
> 1) User 'spam:dovecot' runs Smapassassin
> 2) Hands off to deliver (root:dovecot)

Have you set up some kind of setuid-root deliver, or why is it running
as root:dovecot here instead of spam:dovecot?

> 3) Deliver assumes 'user1:dovecot' identity
> 4) Can't access auth-master in 'root:dovecot' directory (777)

4) happens before 3).

> So it's 'auth-master' that is (a) not available to 'user1' AND (b) not
> available to group 'dovecot'. Huh? Why not?

My guess is that deliver isn't really started with dovecot group
permission.

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to