Package: dovecot-common Version: 1:2.0.12-1 Severity: normal dovecot's ssl-params sub-daemon appears to hardcode the path and filename to its parameters file.
However, the other dovecot tools appear to look for the file using the ssl_parameters_file configuration variable. Launching dovecot as a non-privileged user without write permissions to /var/lib/dovecot produces the following warnings on stderr, even if ssl_parameters_file is set to a location where the user has read/write permissions: 2011-05-09 16:38:42 master: Info: Dovecot v2.0.12 starting up (core dumps disabled) 2011-05-09 16:38:42 ssl-params: Error: open(/var/lib/dovecot/ssl-parameters.dat) failed: Permission denied 2011-05-09 16:38:42 ssl-params: Fatal: creat(/var/lib/dovecot/ssl-parameters.dat.tmp) failed: Permission denied 2011-05-09 16:38:42 ssl-params: Error: child process failed with status 22784 Feel free to forward this upstream if you think it would be useful. thanks for maintaining dovecot in debian! Regards, --dkg -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.38-2-686 (SMP w/1 CPU core) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages dovecot-common depends on: ii adduser 3.112+nmu2 add and remove users and groups ii libbz2-1.0 1.0.5-6 high-quality block-sorting file co ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib ii libpam-runtime 1.1.2-2 Runtime support for the PAM librar ii libpam0g 1.1.2-2 Pluggable Authentication Modules l ii libssl1.0.0 1.0.0d-2 SSL shared libraries ii openssl 1.0.0d-2 Secure Socket Layer (SSL) binary a ii ucf 3.0025+nmu2 Update Configuration File: preserv ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime dovecot-common recommends no packages. Versions of packages dovecot-common suggests: ii ntp 1:4.2.6.p2+dfsg-1+b2 Network Time Protocol daemon and u -- Configuration Files: /etc/default/dovecot changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org