Bug#494746: cyrus-imapd-2.2: connect(/var/run/cyrus/socket/lmtp) failed: Permission, denied

Henrique de Moraes Holschuh hmh at debian.org
Sun Dec 20 18:54:00 UTC 2009


On Sun, 20 Dec 2009, Magnus Danielson wrote:
> I have found that running this command overcomes the problem without
> messing with bits.
> 
> adduser postfix mail

This reduces the overal security of your system.

> Essentially, for postfix to be able to see the socket:s it needs the
> permissions. Letting the user postfix be part of the mail group is
> less intrusive than letting everyone access the bits, so 750 for
> permissions is correct rather than the workwaround 755.

You could have created a new group for this access control, changed the
socket permissions using dpkg-statoverride to this new group, and added the
postfix user to the new group.

That would be safer.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh





More information about the Pkg-Cyrus-imapd-Debian-devel mailing list