Bug#494746: cyrus-imapd-2.2: connect(/var/run/cyrus/socket/lmtp) failed: Permission, denied

Magnus Danielson magnus at rubidium.dyndns.org
Sun Dec 20 19:02:41 UTC 2009


Henrique de Moraes Holschuh wrote:
> On Sun, 20 Dec 2009, Magnus Danielson wrote:
>> I have found that running this command overcomes the problem without
>> messing with bits.
>>
>> adduser postfix mail
> 
> This reduces the overal security of your system.

The alternative to set the socket director to 755 seemed like less secure.

Regardless which is safest, the cyrus-imapd package needs to set it up 
correctly in order for cyrus and postfix to interoperate.

>> Essentially, for postfix to be able to see the socket:s it needs the
>> permissions. Letting the user postfix be part of the mail group is
>> less intrusive than letting everyone access the bits, so 750 for
>> permissions is correct rather than the workwaround 755.
> 
> You could have created a new group for this access control, changed the
> socket permissions using dpkg-statoverride to this new group, and added the
> postfix user to the new group.
> 
> That would be safer.
> 

That would work, but then the cyrus-imapd (or other suitable cyrus 
package) should do this, not me and all other users that want to use 
postfix and cyrus imap together.

Cheers,
Magnus





More information about the Pkg-Cyrus-imapd-Debian-devel mailing list