postfix catch-22...

[Matthew Seaman]

Dear maintainer,

Had an issue with updating from 2.11.1_4,1 to 2.11.3_1,1:  it looks like
you can't win with the ownership of /var/spool/postfix:

On restart after updating the package:

{{{
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: stopping the Postfix mail system
postsuper: fatal: scan_dir_push: open directory defer: Permission denied
postfix/postfix-script: fatal: Postfix integrity check failed!
}}}

Googling shows this to be a problem with the ownership of
/var/spool/postfix.  One 'chown postfix /var/spool/postfix' later, and
postfix will now at least start, but it clearly isn't happy about it.

{{{
smtp-2:/var/spool/postfix:# chown postfix .
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: fatal: the Postfix mail system is not running
postfix/postfix-script: warning: not owned by root: /var/spool/postfix
postfix/postfix-script: starting the Postfix mail system
}}}

{{{
smtp-2:/var/spool/postfix:# postfix check
postfix/postfix-script: warning: not owned by root: /var/spool/postfix
smtp-2:/var/spool/postfix:# ls -ld /var/spool/postfix
drwx------  16 postfix  postfix  16 Nov 10 00:27 /var/spool/postfix/
}}}

It seems from the pkg-plist that postfix:postfix and 0700 are the
intended ownership and permissions:

https://svnweb.freebsd.org/ports/head/mail/postfix/pkg-plist?r1=372370&r2=372369&pathrev=372370

However updating via pkg(8) didn't seem to pick up the ownership change
on /var/spool/postfix -- it got the chmod to 0700 though.

pkg(8) not behaving quite right aside, I'm not convinced that
postfix:postfix and 0700 is correct for /var/spool/postfix -- it used to
be root:postfix and move 0755, which seems to allow postfix to run
without complaint:

{{{
smtp-2:/var/spool/postfix:# chmod 755 .
smtp-2:/var/spool/postfix:# chown root .
smtp-2:/var/spool/postfix:# postfix check
smtp-2:/var/spool/postfix:# service postfix restart
postfix/postfix-script: stopping the Postfix mail system
postfix/postfix-script: starting the Postfix mail system
}}}

	Cheers,

	Matthew

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20141110/e7299f0c/attachment.sig>