Bug 1325517 - The systemd file will not work for mailboxes under /usr/local
Summary: The systemd file will not work for mailboxes under /usr/local
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: dovecot
Version: 23
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Michal Hlavinka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-09 13:50 UTC by dag
Modified: 2016-08-09 08:19 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-08-09 08:19:55 UTC
Type: Bug


Attachments (Terms of Use)

Description dag 2016-04-09 13:50:56 UTC
Description of problem:
dovecot IMAP server could not access the email directories
  Log entry would be: 
Error: open() failed with file /usr/local/..../dbox-Mails/dovecot.index.log: Read-only file system

Version-Release number of selected component (if applicable):
2.2.22-1

How reproducible:
Always

Steps to Reproduce:
1.Assign maildriectory to /usr/local/...
2.Try to access your email
3.

Actual results:
Fails with read-only filesystem

Expected results:
Mails delivered through IMAP

Additional info:

Comment 1 dag 2016-04-09 14:02:12 UTC
Reason found:
/lib/systemd/system/dovecot.service contains:
ProtectSystem=full
which excludes access to everything in /usr
And in standard Pottering manners there is no note whatsoever of this
illegal access anywhere in the logs...
A small entry there would have saved me 4-5 hours of extra work...

Anyway:
Commenting out the line, reloading systemd and restarting dovecot made everything work as expected

Could be nice if changes like these had a note about the potential implications when updating.

Comment 2 Michal Hlavinka 2016-08-09 08:19:55 UTC
This is configuration detail that I'm not going to change. It would go against usual use cases, so it would negatively impact majority of users.

Anyway, I've added comment about ProtectSystem to dovecot.service file in git, will be in next package updates.


Note You need to log in before you can comment on or make changes to this bug.