Package: dovecot-core
Version: 1:2.1.7-7
Severity: serious
Justification: Policy 11.6

Dear Maintainer,

The default configurations files for dovecot specify that mbox write locking
should be done using the dotlock method first, and then the fcntl() method.
This is not the correct order, according to Debian policy (11.6).

The default /etc/dovecot/conf.d/10-mail.conf, installed by dovecot-core,
contains this:

  #mbox_write_locks = dotlock fcntl

and a glance at the package sources would seem to indicate that the value for
mbox_write_locks indeed defaults to "dotlock fcntl".

In squeeze I see there used to be a patch that added the following message and
changed the commented-out default value in /etc/dovecot.conf:

  # The Debian value for mbox_write_locks differs from upstream Dovecot. It is
  # changed to be compliant with Debian Policy (section 11.6) for NFS safety.
  #       Dovecot: mbox_write_locks = dotlock fcntl
  #       Debian:  mbox_write_locks = fcntl dotlock

It also patched the source code so that the default value of mbox_write_locks
was "fcntl dotlock".  What happened to this patch?


-- Package-specific info:

-- System Information:
Debian Release: 7.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dovecot-core depends on:
ii  adduser         3.113+nmu3
ii  libbz2-1.0      1.0.6-4
ii  libc6           2.13-38
ii  libpam-runtime  1.1.3-7.1
ii  libpam0g        1.1.3-7.1
ii  libssl1.0.0     1.0.1e-2
ii  openssl         1.0.1e-2
ii  ucf             3.0025+nmu3
ii  zlib1g          1:1.2.7.dfsg-13

dovecot-core recommends no packages.

Versions of packages dovecot-core suggests:
pn  dovecot-gssapi        <none>
ii  dovecot-imapd         1:2.1.7-7
pn  dovecot-ldap          <none>
pn  dovecot-lmtpd         <none>
pn  dovecot-managesieved  <none>
pn  dovecot-mysql         <none>
pn  dovecot-pgsql         <none>
ii  dovecot-pop3d         1:2.1.7-7
ii  dovecot-sieve         1:2.1.7-7
ii  dovecot-solr          1:2.1.7-7
pn  dovecot-sqlite        <none>
ii  ntp                   1:4.2.6.p5+dfsg-2

Versions of packages dovecot-core is related to:
ii  dovecot-common                 1:2.1.7-7
ii  dovecot-core [dovecot-common]  1:2.1.7-7
pn  dovecot-dbg                    <none>
pn  dovecot-dev                    <none>
pn  dovecot-gssapi                 <none>
ii  dovecot-imapd                  1:2.1.7-7
pn  dovecot-ldap                   <none>
pn  dovecot-lmtpd                  <none>
pn  dovecot-managesieved           <none>
pn  dovecot-mysql                  <none>
pn  dovecot-pgsql                  <none>
ii  dovecot-pop3d                  1:2.1.7-7
ii  dovecot-sieve                  1:2.1.7-7
pn  dovecot-sqlite                 <none>

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to