Package: postfix
Version: 3.1.4-3
Tags: patch

The postinst script creates a file
/etc/systemd/system/postfix.service.d/override.conf with permissions
0600, and systemd complains about that in the system log:

,----
| systemd[1]: Configuration file 
/etc/systemd/system/postfix.service.d/override.conf is marked 
world-inaccessible. This has no effect as configuration data is accessible via 
APIs without restrictions. Proceeding anyway.
`----

This happens because the file is created by mktemp(1) and then copied
with cp, it might be better to use install instead as in this (untested)
patch:

--8<---------------cut here---------------start------------->8---
diff --git a/debian/postfix.postinst b/debian/postfix.postinst
index d313be46..b413a50e 100644
--- a/debian/postfix.postinst
+++ b/debian/postfix.postinst
@@ -190,7 +190,7 @@ add_service_override() {
     echo "After=network-online.target" >> $SERVICE
     echo "After=systemd-resolved.service" >> $SERVICE
     mkdir -p /etc/systemd/system/$NAME.service.d
-    cp $SERVICE /etc/systemd/system/$NAME.service.d/override.conf
+    install -m 644 $SERVICE /etc/systemd/system/$NAME.service.d/override.conf
     rm -f $SERVICE
 }
 umask 022
--8<---------------cut here---------------end--------------->8---


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 4.9.3-nouveau (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages postfix depends on:
ii  adduser                3.115
ii  cpio                   2.11+dfsg-6
ii  debconf [debconf-2.0]  1.5.59
ii  dpkg                   1.18.19
ii  init-system-helpers    1.46
ii  libc6                  2.24-8
ii  libdb5.3               5.3.28-12
ii  libicu57               57.1-5
ii  libsasl2-2             2.1.27~101-g0780600+dfsg-2
ii  libssl1.1              1.1.0c-2
ii  lsb-base               9.20161125
ii  netbase                5.4
ii  postfix-sqlite         3.1.4-3
ii  ssl-cert               1.0.38

Versions of packages postfix recommends:
ii  python3  3.5.1-4

Versions of packages postfix suggests:
ii  bsd-mailx [mail-reader]       8.1.2-0.20160123cvs-3
pn  dovecot-common                <none>
ii  emacs-snapshot [mail-reader]  1:20170101-1
ii  emacs24 [mail-reader]         24.5+1-7.1+b1
ii  icedove [mail-reader]         1:45.6.0-1~deb8u1
ii  libsasl2-modules              2.1.27~101-g0780600+dfsg-2
ii  mutt [mail-reader]            1.7.1-5
pn  postfix-cdb                   <none>
ii  postfix-doc                   3.1.4-3
pn  postfix-ldap                  <none>
pn  postfix-lmdb                  <none>
pn  postfix-mysql                 <none>
pn  postfix-pcre                  <none>
pn  postfix-pgsql                 <none>
ii  procmail                      3.22-25
pn  resolvconf                    <none>
ii  s-nail [mail-reader]          14.8.14-3
pn  sasl2-bin                     <none>
pn  ufw                           <none>

-- debconf information:
* postfix/mailbox_limit: 0
  postfix/bad_recipient_delimiter:
* postfix/root_address: sven
  postfix/rfc1035_violation: false
* postfix/compat_conversion_warning: true
* postfix/mynetworks: 127.0.0.0/8
* postfix/mailname: localhost.localdomain
* postfix/procmail: true
* postfix/chattr: false
* postfix/protocols: all
* postfix/destinations: turtle.local, turtle, localhost.localdomain, localhost
  postfix/relay_restrictions_warning:
  postfix/retry_upgrade_warning:
  postfix/kernel_version_warning:
* postfix/dynamicmaps_conversion_warning: true
* postfix/sqlite_warning: true
* postfix/recipient_delim: +
* postfix/lmtp_retired_warning: true
  postfix/main_cf_conversion_warning: true
  postfix/not_configured:
* postfix/relayhost: mail.gmx.net
  postfix/tlsmgr_upgrade_warning:
  postfix/mydomain_warning:
* postfix/main_mailer_type: Internet with smarthost

Reply via email to