Bug 2379483 - smtpd.conf(5) examples use wrong group _smtpd
Summary: smtpd.conf(5) examples use wrong group _smtpd
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: opensmtpd
Version: 42
Hardware: x86_64
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Denis Fateyev
QA Contact: Fedora Extras Quality Assurance
URL: https://github.com/OpenSMTPD/OpenSMTP...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-11 01:55 UTC by Douglas
Modified: 2025-08-03 01:14 UTC (History)
1 user (show)

Fixed In Version: opensmtpd-7.7.0p0-2.el10_1 opensmtpd-7.7.0p0-3.fc42
Clone Of:
Environment:
Last Closed: 2025-08-03 00:23:53 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Douglas 2025-07-11 01:55:12 UTC
In the EXAMPLES section, the first example contains a `chown` command with the non-existing group `_smtpd`.

       This first example is similar to the default configuration, but all out‐
       going mail is forwarded to a remote SMTP server.  A secrets file is
       needed to specify a username and password:
           # touch /etc/opensmtpd/secrets
           # chmod 640 /etc/opensmtpd/secrets
           # chown root:_smtpd /etc/opensmtpd/secrets
           # echo "bob username:password" > /etc/opensmtpd/secrets

The correct group created by this package is `smtpd`, without the leading underscore. Here's from /etc/group:

smtpd:x:665:
smtpq:x:664:

As this manual page appears to have been adapted to Fedora — judging by the use of `/etc/opensmtpd` instead of OpenBSD's `/etc/mail` — it seems right to have it referencing the groups provided by the Fedora packaging.

Reproducible: Always

Steps to Reproduce:
1. `dnf install opensmtpd`
2. `man smtpd.conf`
3. `cat /etc/group`

Comment 1 Douglas 2025-07-11 02:05:11 UTC
Speaking of which, isn't it a bad idea to `echo` a password like this? I think it'll end up in the process list.

# echo "bob username:password" > /etc/opensmtpd/secrets

Maybe we could replace this with a safer instruction; something like:

Edit /etc/opensmtpd/secrets with your preferred editor and place your credentials in the format "bob username:password", where "bob" is a label of choice (...) see table(5) for more info.

Comment 2 Denis Fateyev 2025-07-25 20:12:37 UTC
I have added a temporary fix, and created an issue against upstream.

> isn't it a bad idea to `echo` a password like this?
Normally, the administrator must realize the consequences of the command he/she issues. So not a major problem.
I suggest you file an issue upstream if you think the wording should be improved — it's up to them to decide.

Comment 3 Fedora Update System 2025-07-25 20:32:50 UTC
FEDORA-2025-cac543328f (opensmtpd-7.7.0p0-3.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-cac543328f

Comment 4 Fedora Update System 2025-07-25 20:32:51 UTC
FEDORA-EPEL-2025-b0585b279f (opensmtpd-7.7.0p0-2.el10_1) has been submitted as an update to Fedora EPEL 10.1.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b0585b279f

Comment 5 Fedora Update System 2025-07-26 00:20:06 UTC
FEDORA-EPEL-2025-b0585b279f has been pushed to the Fedora EPEL 10.1 testing repository.

You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-b0585b279f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-07-26 02:23:02 UTC
FEDORA-2025-cac543328f has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-cac543328f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-cac543328f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-08-03 00:23:53 UTC
FEDORA-EPEL-2025-b0585b279f (opensmtpd-7.7.0p0-2.el10_1) has been pushed to the Fedora EPEL 10.1 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2025-08-03 01:14:44 UTC
FEDORA-2025-cac543328f (opensmtpd-7.7.0p0-3.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.