Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Aug 2018 06:39:06 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 230685] mail/opendkim fails to start when socket directory /var/run/milteropendkim has group write acl
Message-ID:  <bug-230685-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230685

            Bug ID: 230685
           Summary: mail/opendkim fails to start when socket directory
                    /var/run/milteropendkim has group write acl
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: dewayne@heuristicsystems.com.au
                CC: freebsd-ports@dan.me.uk
                CC: freebsd-ports@dan.me.uk
             Flags: maintainer-feedback?(freebsd-ports@dan.me.uk)

The /usr/local/etc/rc.d/milter-opendkim is really very good, thankyou.  How=
ever
I experience startup failures which sendmail advises via its maillog:
Aug 17 13:47:11 b3 sm-mta[4193]: w7H3lB78004193: Milter (dkim): local socket
name /var/run/milteropendkim/sock unsafe

Gasp!

sendmail doesn't like group write permissions on /var/run/milteropendkim/.

FIX
Modifying all instances of "_piddir_perms=3D" in the startup rc file, to
_piddir_perms=3D"0750"
fixes the issue.=20=20

And for package builds, the same step needs to be applied to=20
/usr/ports/mail/opendkim/files/milter-opendkim.in

BACKGROUND
My env is FreeBSD11.2, the rc.conf entries are
milteropendkim_enable=3D"YES"
milteropendkim_uid=3D"dkim"
milteropendkim_cfgfile=3D"/usr/local/etc/opendkim.conf"
milteropendkim_socket=3D"/var/run/milteropendkim/sock"

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-230685-7788>