Bug 2379483

Summary: smtpd.conf(5) examples use wrong group _smtpd
Product: [Fedora] Fedora Reporter: Douglas <doug.hs>
Component: opensmtpdAssignee: Denis Fateyev <denis>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: 42CC: denis
Target Milestone: ---Keywords: Documentation
Target Release: ---   
Hardware: x86_64   
OS: Linux   
URL: https://github.com/OpenSMTPD/OpenSMTPD/issues/1290
Whiteboard:
Fixed In Version: opensmtpd-7.7.0p0-2.el10_1 opensmtpd-7.7.0p0-3.fc42 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-08-03 00:23:53 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Douglas 2025-07-11 01:55:12 UTC
In the EXAMPLES section, the first example contains a `chown` command with the non-existing group `_smtpd`.

       This first example is similar to the default configuration, but all out‐
       going mail is forwarded to a remote SMTP server.  A secrets file is
       needed to specify a username and password:
           # touch /etc/opensmtpd/secrets
           # chmod 640 /etc/opensmtpd/secrets
           # chown root:_smtpd /etc/opensmtpd/secrets
           # echo "bob username:password" > /etc/opensmtpd/secrets

The correct group created by this package is `smtpd`, without the leading underscore. Here's from /etc/group:

smtpd:x:665:
smtpq:x:664:

As this manual page appears to have been adapted to Fedora — judging by the use of `/etc/opensmtpd` instead of OpenBSD's `/etc/mail` — it seems right to have it referencing the groups provided by the Fedora packaging.

Reproducible: Always

Steps to Reproduce:
1. `dnf install opensmtpd`
2. `man smtpd.conf`
3. `cat /etc/group`

Comment 1 Douglas 2025-07-11 02:05:11 UTC
Speaking of which, isn't it a bad idea to `echo` a password like this? I think it'll end up in the process list.

# echo "bob username:password" > /etc/opensmtpd/secrets

Maybe we could replace this with a safer instruction; something like:

Edit /etc/opensmtpd/secrets with your preferred editor and place your credentials in the format "bob username:password", where "bob" is a label of choice (...) see table(5) for more info.

Comment 2 Denis Fateyev 2025-07-25 20:12:37 UTC
I have added a temporary fix, and created an issue against upstream.

> isn't it a bad idea to `echo` a password like this?
Normally, the administrator must realize the consequences of the command he/she issues. So not a major problem.
I suggest you file an issue upstream if you think the wording should be improved — it's up to them to decide.

Comment 3 Fedora Update System 2025-07-25 20:32:50 UTC
FEDORA-2025-cac543328f (opensmtpd-7.7.0p0-3.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-cac543328f

Comment 4 Fedora Update System 2025-07-25 20:32:51 UTC
FEDORA-EPEL-2025-b0585b279f (opensmtpd-7.7.0p0-2.el10_1) has been submitted as an update to Fedora EPEL 10.1.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b0585b279f

Comment 5 Fedora Update System 2025-07-26 00:20:06 UTC
FEDORA-EPEL-2025-b0585b279f has been pushed to the Fedora EPEL 10.1 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b0585b279f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-07-26 02:23:02 UTC
FEDORA-2025-cac543328f has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-cac543328f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-cac543328f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-08-03 00:23:53 UTC
FEDORA-EPEL-2025-b0585b279f (opensmtpd-7.7.0p0-2.el10_1) has been pushed to the Fedora EPEL 10.1 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2025-08-03 01:14:44 UTC
FEDORA-2025-cac543328f (opensmtpd-7.7.0p0-3.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.