Bug#442491: Permissions of mailstore and administrative directories are not correctly positionned by the package

[Frédéric Tronel]

Package: cyrus-imapd-2.2
Version: 2.2.13-13
Severity: important

--- Please enter the report below this line. ---

After having installed cyrus-imapd-2.2, I discovered that the imapd server was 
unable to run because the permission beneath its administrative 
directory /var/lib/cyrus was not correctly assigned:

ls -la /var/lib/cyrus/
total 11
drwxr-x--- 10 cyrus mail  312 2007-09-16 16:03 .
drwxr-xr-x 60 root  root 1560 2007-09-16 16:02 ..
-rw-------  1 cyrus mail  144 2007-09-16 16:03 annotations.db
drwx------  2 root  root   48 2007-09-16 16:02 db
drwx------  2 cyrus mail  112 2007-09-16 16:03 db.backup1
drwx------  2 root  root   48 2007-09-16 16:02 log
-rw-------  1 cyrus mail  144 2007-09-16 16:03 mailboxes.db
drwx------  2 root  root   48 2007-09-16 16:02 msg
drwx------  2 root  root   48 2007-09-16 16:02 proc
drwx------ 28 root  root  672 2007-09-16 16:02 quota
drwxr-x---  2 root  root   48 2007-09-16 16:02 socket
drwx------ 28 root  root  672 2007-09-16 16:02 user

All the directories belong to root whereas cyrmaster is running as cyrus !
Here is the kind of errors, I have in my syslog:


Sep 16 16:03:03 proton cyrus/master[30860]: about to 
exec /usr/sbin/ctl_cyrusdb
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR: 
dbenv->open '/var/lib/cyrus/db' failed: Permission denied
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR: init() on berkeley
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR: 
reading /var/lib/cyrus/db/skipstamp, assuming the worst: Permission denied
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: checkpointing cyrus databases
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR db4: txn_checkpoint 
interface requires an environment configured for the transaction subsystem
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR: couldn't checkpoint: 
Invalid argument
Sep 16 16:03:03 proton cyrus/ctl_cyrusdb[30860]: DBERROR: 
sync /var/lib/cyrus/db: cyrusdb error

Changing recursively the permissions to cyrus.mail for /var/lib/cyrus 
and /var/spool/cyrus seems to solve the problem. 


--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.22

Debian Release: lenny/sid

--- Package information. ---
Depends                    (Version) | Installed
====================================-+-==============
cyrus-common-2.2       (= 2.2.13-13) | 2.2.13-13
libasn1-6-heimdal                    | 0.7.2.dfsg.1-10
libc6                     (>= 2.5-5) | 2.6.1-3
libcomerr2               (>= 1.33-3) | 1.40.2-1
libdb4.2                             | 4.2.52+dfsg-3
libgssapi4-heimdal                   | 0.7.2.dfsg.1-10
libkrb5-17-heimdal                   | 0.7.2.dfsg.1-10
libroken16-heimdal                   | 0.7.2.dfsg.1-10
libsasl2-2                           | 2.1.22.dfsg1-15
libssl0.9.8            (>= 0.9.8e-1) | 0.9.8e-8
libwrap0                             | 7.6.dbs-14