[postfix-users] Verzeichnisrechte

[Hans Rembeck]

Ein

postfix set-permissions

brachte schon einige Verbesserungen.

Aber ein postfix check bringt immer noch folgende Meldungen:
postfix/postfix-script: warning: not owned by group postdrop: 
/usr/sbin/postqueue
postfix/postfix-script: warning: not owned by group postdrop: 
/usr/sbin/postdrop
postfix/postfix-script: warning: not owned by root: /var/spool/postfix/etc
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/etc/ssl
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/etc/ssl/certs
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/etc/ssl/certs/ca-certificates.crt
postfix/postfix-script: warning: not owned by root: /var/spool/postfix/lib
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/lib/x86_64-linux-gnu
postfix/postfix-script: warning: not owned by root: /var/spool/postfix/usr
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/usr/lib
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/usr/lib/zoneinfo
postfix/postfix-script: warning: not owned by root: 
/var/spool/postfix/usr/lib/sasl2

Warum nimmt sich Postfix die Dateirechte (unter var/spool/postfix/), 
meckert aber dann das sie nicht root gehören?

Mit freundlichen Grüßen

Rembeck Hans

Am 17.07.2014 21:51, schrieb Pascal Volk:
> On 07/17/2014 09:12 AM Hans Rembeck wrote:
>> Hallo Liste,
>>
>> mir fällt jetzt bei meiner neuen Postfixinstallation unter Wheezy nach
>> postfix check folgende warnings auf:
>>
>> postfix/postfix-script: warning: not owned by group postdrop:
>> /usr/sbin/postqueue
>> postfix/postfix-script: warning: not owned by group postdrop:
>> /usr/sbin/postdrop
>> postfix/postfix-script: warning: not owned by group postdrop:
>> /var/spool/postfix/public
>> postfix/postfix-script: warning: not owned by group postdrop:
>> /var/spool/postfix/maildrop
>> postfix/postfix-script: warning: not owned by root: /var/spool/postfix/etc
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/etc/ssl
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/etc/ssl/certs
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/etc/ssl/certs/ca-certificates.crt
>> postfix/postfix-script: warning: not owned by root: /var/spool/postfix/lib
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/lib/x86_64-linux-gnu
>> postfix/postfix-script: warning: not owned by root: /var/spool/postfix/usr
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/usr/lib
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/usr/lib/zoneinfo
>> postfix/postfix-script: warning: not owned by root:
>> /var/spool/postfix/usr/lib/sasl2
> Das sollte sich mit `postfix set-permissions` beheben lassen. Mehr
> Details dazu in postfix(1).
>
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_nisplus-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_nisplus-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_nis-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_nis-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_dns-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_compat-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_compat-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libresolv-2.13.so and
>> /lib/x86_64-linux-gnu/libresolv-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_files-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_files-2.13.so differ
>> postfix/postfix-script: warning:
>> /var/spool/postfix/lib/x86_64-linux-gnu/libnss_hesiod-2.13.so and
>> /lib/x86_64-linux-gnu/libnss_hesiod-2.13.so differ
> Das kann durch Updates verursacht werden. Der Paketmanager operiert
> unter /. Dein Postfix läuft ge-chroot-et. Der Paketmanager entpackt die
> Dateien aber nicht zusätzlich ins chroot von Postfix.
> Ein `service postfix restart` sorgt dafür, dass im Postfix-chroot alle
> erforderlichen Dateien aktualisiert werden.
>
> Nach `postfix set-permissions` und `service postfix restart` sollte
> `postfix check` keine Output mehr erzeugen.
>
>
> Gruß
> Pascal