Hi!
When I wondered why one machine hadn't sent me expected cron-output
last night, I checked the mail logs and noticed:
Aug 9 07:47:55 gartl postfix/postfix-script: warning: not owned by postfix:
/var/spool/postfix/active
for every directory under /var/spool/postfix, and yes:
drwxr-xr-x 19 root root 4096 2005-06-22 13:43 .
drwxr-xr-x 8 root root 4096 2005-06-22 13:45 ..
drwx------ 2 Debian-exim root 4096 2005-06-22 13:43 active
drwx------ 2 Debian-exim root 4096 2005-06-22 13:43 bounce
drwx------ 2 Debian-exim root 4096 2005-06-22 13:43 corrupt
...
This box is running up-to-date Sarge, and has had postfix installed
(&working) instead of exim since it was installed a couple weeks ago.
Debian-exim has uid 102, and postfix 103.
rc exim4-base 4.50-8 support files for all exim MTA (v4) packages
rc exim4-config 4.50-8 configuration for the exim MTA (v4)
ii postfix 2.1.5-9 A high-performance mail transport agent
A quick check points to left-over /etc/cron.daily/exim4-base as the
only likely suspect:
# run tidydb as Debian-exim:Debian-exim.
if [ -x /usr/sbin/exim_tidydb ]; then
cd /var/spool/exim4/db || exit 1
find /var/spool/exim4/db -maxdepth 1 -name '*.lockfile' -or -type f \
-printf '%f\0' | \
xargs -0r -n 1 \
start-stop-daemon --start --exec /usr/sbin/exim_tidydb \
--chuid Debian-exim:Debian-exim -- /var/spool/exim4 > /dev/null
fi
though how that would concern /var/spool/postfix is currently beyond
me. Especially since /usr/sbin/exim_tidydb doesn't even exist on this
box.
Any hints?
cheers+tia,
&rw
--
/ Ing. Robert Waldner | Security Engineer | CoreTec IT-Security \
\ <rw@coretec.at> | T +43 1 503 72 73 | F +43 1 503 72 73 x99 /
Attachment:
pgp6nQgAI7vB4.pgp
Description: PGP signature