[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

postfix' queue-dirs taken over by the Debian-exim user



Hi!

When I wondered why one machine hadn't sent me expected cron-output 
 last night, I checked the mail logs and noticed:

Aug  9 07:47:55 gartl postfix/postfix-script: warning: not owned by postfix:
 /var/spool/postfix/active

for every directory under /var/spool/postfix, and yes:
drwxr-xr-x  19 root        root     4096 2005-06-22 13:43 .
drwxr-xr-x   8 root        root     4096 2005-06-22 13:45 ..
drwx------   2 Debian-exim root     4096 2005-06-22 13:43 active
drwx------   2 Debian-exim root     4096 2005-06-22 13:43 bounce
drwx------   2 Debian-exim root     4096 2005-06-22 13:43 corrupt
...

This box is running up-to-date Sarge, and has had postfix installed 
 (&working) instead of exim since it was installed a couple weeks ago.
 Debian-exim has uid 102, and postfix 103.

rc  exim4-base     4.50-8         support files for all exim MTA (v4) packages
rc  exim4-config   4.50-8         configuration for the exim MTA (v4)
ii  postfix        2.1.5-9        A high-performance mail transport agent

A quick check points to left-over /etc/cron.daily/exim4-base as the
 only likely suspect:

# run tidydb as Debian-exim:Debian-exim.
if [ -x /usr/sbin/exim_tidydb ]; then
  cd /var/spool/exim4/db || exit 1
  find /var/spool/exim4/db -maxdepth 1 -name '*.lockfile' -or -type f \
    -printf '%f\0' | \
      xargs -0r -n 1 \
      start-stop-daemon --start --exec /usr/sbin/exim_tidydb \
      --chuid Debian-exim:Debian-exim -- /var/spool/exim4 > /dev/null
fi

 though how that would concern /var/spool/postfix is currently beyond 
 me. Especially since /usr/sbin/exim_tidydb doesn't even exist on this 
 box.

Any hints?

cheers+tia,
&rw
-- 
/ Ing. Robert Waldner | Security Engineer |  CoreTec IT-Security  \
\   <rw@coretec.at>   | T +43 1 503 72 73 | F +43 1 503 72 73 x99 /


Attachment: pgpLxpOa_c5Ck.pgp
Description: PGP signature


Reply to: