Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 231220 - mail-filter/postgrey-1.31 installs config file with wrong permissions
Summary: mail-filter/postgrey-1.31 installs config file with wrong permissions
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
: 231235 (view as bug list)
Depends on:
Blocks:
 
Reported: 2008-07-08 20:22 UTC by Kevin O'Gorman
Modified: 2008-07-21 17:53 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Kevin O'Gorman 2008-07-08 20:22:40 UTC
Fresh install of postgrey.  It installs a config file in /etc/conf.d, but cannot
access it, so it uses entirely default config.

treat ~ # ls -l /etc/conf.d/postgrey
-rw-r----- 1 root postgrey 1915 2008-07-08 10:50 /etc/conf.d/postgrey

With that setup, it needs to be o+r, for mode 644.  Besides that, why is it
group postgrey?  The daemon executable is not SGID, and I expect it runs as
root:root, at least when it's reading its config.



Reproducible: Always

Actual Results:  
Daemon runs with default config and opens a TCP socket

Expected Results:  
Should open a UNIX socket, which is what I put in the config file.
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2008-07-08 23:01:00 UTC
*** Bug 231235 has been marked as a duplicate of this bug. ***
Comment 2 Tobias Scherbaum (RETIRED) gentoo-dev 2008-07-21 17:53:41 UTC
(In reply to comment #0)
> Fresh install of postgrey.  It installs a config file in /etc/conf.d, but
> cannot
> access it, so it uses entirely default config.

Though it's group postgrey it should still be able to read the config. Anyway, there was no reason to install this for root:postgrey (640), it was just using the insopts set some lines above. This is fixed in CVS now (both 1.31 and 1.31-r2).