Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #239303

Re: Courier Authdeamon problem after upgrade

Show all headers | View raw

On Wed, Aug 25, 2021 at 04:14:51PM +0200, Philipp Ewald wrote:
> i have upgrade my Debian 10 to 11 and notice that courier-authdeamon got problem with new permissions in /var/run/courier

This appears to be intentional and security-related.
See <http://bugs.debian.org/984810> and
<https://security-tracker.debian.org/tracker/CVE-2021-28374>.

> Debian 11:
> #Type Path                    Mode UID     GID     Age Argument
>     d /run/courier            0775 root    courier -   -
>     d /run/courier/authdaemon 0750 courier courier -   -
> 
> But with this configuration authdaemon not working:
> 
>  ERR: authdaemon: s_connect() failed: Permission denied
>  /usr/bin/maildrop: Temporary authentication failure.
> status: deferred

Perhaps this should be considered a bug in maildrop, rather than in
courier-authdaemon.  I'm not familiar with maildrop or what privileges
it requires.  The package description says it runs setgid "mail", whereas
this authdaemon directory is only accessible to group "courier".  But I
don't know how to fix it without breaking other things.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Courier Authdeamon problem after upgrade Philipp Ewald <philipp.ewald@digionline.de> - 2021-08-25 16:40 +0200
  Re: Courier Authdeamon problem after upgrade Greg Wooledge <greg@wooledge.org> - 2021-08-25 17:10 +0200
    Re: Courier Authdeamon problem after upgrade Philipp Ewald <philipp.ewald@digionline.de> - 2021-08-26 10:30 +0200
      Re: Courier Authdeamon problem after upgrade Greg Wooledge <greg@wooledge.org> - 2021-08-26 13:10 +0200
        Re: Courier Authdeamon problem after upgrade Philipp Ewald <philipp.ewald@digionline.de> - 2021-08-26 13:50 +0200

csiph-web