Package: postfix
Version: 3.1.3-3
Severity: normal
Dear Maintainer,
please consider adding following upstream patch to suppress symlink-warnings by
postfix-script. Exemplary output:
[...]
Nov 15 09:32:39 nihlus postfix/postfix-script[33514]: warning: group or other
writable: /usr/lib/postfix/./sbin/lmtp
Nov 15 09:32:39 nihlus postfix/postfix-script[33515]: warning: group or other
writable: /usr/lib/postfix/./libpostfix-util.so.1
Nov 15 09:32:39 nihlus postfix/postfix-script[33516]: warning: group or other
writable: /usr/lib/postfix/./libpostfix-tls.so.1
Nov 15 09:32:39 nihlus postfix/postfix-script[33517]: warning: group or other
writable: /usr/lib/postfix/./libpostfix-dns.so.1
Nov 15 09:32:39 nihlus postfix/postfix-script[33518]: warning: group or other
writable: /usr/lib/postfix/./libpostfix-global.so.1
Nov 15 09:32:39 nihlus postfix/postfix-script[33519]: warning: group or other
writable: /usr/lib/postfix/./libpostfix-master.so.1
Nov 15 09:32:39 nihlus postfix/postfix-script[33522]: warning: group or other
writable: /usr/lib/postfix/sbin/./lmtp
Nov 15 09:32:39 nihlus postfix/postfix-script[33594]: starting the Postfix mail
system
Nov 15 09:32:39 nihlus postfix/master[33612]: daemon started -- version 3.1.3,
configuration /etc/postfix
Tested patch:
--- postfix-3.1.3/conf/postfix-script 2016-11-15 12:28:24.000000000 +0000
+++ postfix-3.1.3-patched/conf/postfix-script 2016-11-15 12:27:38.135865666
+0000
@@ -299,10 +299,17 @@
}
todo=`echo "$todo" | tr ' ' '\12' | sort -u`
- find $todo ! -user root \
+ if find -L $config_directory/main.cf >/dev/null 2>&1
+ then
+ FIND="find -L"
+ else
+ FIND=find
+ fi
+
+ $FIND $todo ! -user root \
-exec $WARN not owned by root: {} \;
- find $todo \( -perm -020 -o -perm -002 \) \
+ $FIND $todo \( -perm -020 -o -perm -002 \) \
-exec $WARN group or other writable: {} \;
# Check Postfix mail_owner-owned directory tree owner/permissions.
Original thread: http://marc.info/?l=postfix-users&m=145687936712995&w=2
Regards
Thomas
