[pkg-kolab] Bug#581757: kolabd: Permissions on /etc/imapd.group are wrong

[Alexander Gran]

Package: kolabd
Version: 2.2.3-20091217-2
Severity: important
Tags: patch

Hi,

kolabs imapd uses /etc/imapd.gorup as basis for group permissions.
This file is generated by /etc/kolab/templates/imapd.group.template
However it sets the permissions to root.root, and therefore cyrus cannot read the file and
silently (this is an issue in upstream, it should log the fact) skips to /etc/group

Fix is simple, just set the permissions to cyrus.something.


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-3-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages kolabd depends on:
ii  adduser               3.112              add and remove users and groups
ii  kolab-cyrus-admin     2.2.13-9           Kolab Cyrus mail system - administ
ii  kolab-cyrus-clients   2.2.13-9           Kolab Cyrus mail system (test clie
ii  kolab-cyrus-imapd     2.2.13-9           Kolab Cyrus mail system - IMAP sup
ii  kolab-cyrus-pop3d     2.2.13-9           Kolab Cyrus mail system - POP3 sup
ii  libkolab-perl         1:2.2.3-20091217-1 Perl modules for Kolab
ii  libmail-box-perl      2.094-1            message-folder management module
ii  libnet-netmask-perl   1.9015-3           parse, manipulate and lookup IP ne
ii  libsasl2-modules      2.1.23.dfsg1-5     Cyrus SASL - pluggable authenticat
ii  libterm-readkey-perl  2.30-4             A perl module for simple terminal 
ii  libterm-readline-gnu- 1.19-2             Perl extension for the GNU Readlin
ii  lsb-base              3.2-23.1           Linux Standard Base 3.2 init scrip
ii  php-kolab-filter      0.1.8-1            Postfix filters for the Kolab serv
ii  php-kolab-freebusy    0.1.5-3            provide Kolab free/busy informatio
ii  postfix               2.6.5-3            High-performance mail transport ag
ii  postfix-ldap          2.6.5-3            LDAP map support for Postfix
ii  sasl2-bin             2.1.23.dfsg1-5     Cyrus SASL - administration progra

Versions of packages kolabd recommends:
ii  ldap-utils                    2.4.17-2.1 OpenLDAP utilities
ii  slapd                         2.4.17-2.1 OpenLDAP server (slapd)

Versions of packages kolabd suggests:
pn  amavisd-new             <none>           (no description available)
pn  clamav                  <none>           (no description available)
pn  clamav-daemon           <none>           (no description available)
pn  db4.2-util              <none>           (no description available)
ii  kolab-webadmin          2.2.3-20091217-2 Kolab administration web interface
ii  openssl                 0.9.8n-1         Secure Socket Layer (SSL) binary a
pn  spamassassin            <none>           (no description available)

-- Configuration Files:
/etc/kolab/apache.conf changed [not included]
/etc/kolab/templates/imapd.conf.template changed [not included]
/etc/kolab/templates/imapd.group.template changed [not included]
/etc/kolab/templates/ldapvirtual.cf.template changed [not included]
/etc/kolab/templates/main.cf.template changed [not included]
/etc/kolab/templates/php.ini.template changed [not included]
/etc/kolab/templates/saslauthd.conf.template changed [not included]
/etc/kolab/templates/slapd.conf.template changed [not included]

-- no debconf information
-------------- next part --------------
--- imapd.group.template	2010-05-05 21:41:02.696743620 +0200
+++ imapd.group.template.old	2010-05-06 04:07:01.628743349 +0200
@@ -1,7 +1,7 @@
 KOLAB_META_START
 TARGET=/etc/imapd.group
 PERMISSIONS=0640
-OWNERSHIP=cyrus:root
+OWNERSHIP=root:root
 KOLAB_META_END
 ##  Copyright (c) 2003 Martin Konold <martin.konold at erfrakon.de>
 ##  Copyright (c) 2003 Tassilo Erlewein <tassilo.erlewein at erfrakon.de>