Package: dovecot-common Version: 1.0.rc15-2etch1 Severity: minor Tags: patch
>From <http://wiki.dovecot.org/UserIds> : | dovecot user isn't used for any kind of mail processing - don't store users' | mails as dovecot, and don't put dovecot user to mail or any other groups. The postinst script does not follow this recommendation, and I fail to see why. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-5-k7 Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Versions of packages dovecot-common depends on: ii add 3.102 Add and remove users and groups ii lib 2.3.6.ds1-13etch2 GNU C Library: Shared libraries ii lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library ii lib 1.4.4-7etch4 MIT Kerberos runtime libraries ii lib 2.1.30-13.3 OpenLDAP libraries ii lib 5.0.32-7etch3 mysql database client library ii lib 0.79-4 Runtime support for the PAM librar ii lib 0.79-4 Pluggable Authentication Modules l ii lib 8.1.9-0etch1 PostgreSQL C client library ii lib 3.3.8-1.1 SQLite 3 shared library ii lib 0.9.8c-4etch1 SSL shared libraries ii ope 0.9.8c-4etch1 Secure Socket Layer (SSL) binary a ii zli 1:1.2.3-13 compression library - runtime dovecot-common recommends no packages. -- no debconf information
--- a/debian/dovecot-common.postinst +++ b/debian/dovecot-common.postinst @@ -24,10 +24,6 @@ if [ "$1" = "configure" ]; then --disabled-password --quiet dovecot || true fi - if [ -z "`id dovecot | grep '(mail)' 2> /dev/null`" ]; then - /usr/sbin/adduser dovecot mail || true - fi - # Fix permissions chmod 755 /var/run/dovecot chmod 750 /var/run/dovecot/login