dovecot - Mar 2018 - Permissions on /var/log/dovecot

/var/log/dovecot exists and has a lot of logging in it, but I get errors (in
mail.log) on an always_bcc action in postfix:

mail postfix/pipe[13015]: 401cvS0R8BzbSkL: to=<backup+073.kremels-kreme at
doamin.tld>, relay=dovecot, delay=398058, delays=398045/13/0/0.04, dsn=4.3.0,
status=deferred (temporary failure. Command output: Can't open log file
/var/log/dovecot: Permission denied )

What should the permissions on /var/log/dovecot be? (they are 640 root:wheel on
FreeBSD, identical to mail.log)

On 19 March 2018 at 22:06, @lbutlr <kremels at kreme.com> wrote:
> /var/log/dovecot exists and has a lot of logging in it, but I get errors
> (in mail.log) on an always_bcc action in postfix:
>
> mail postfix/pipe[13015]: 401cvS0R8BzbSkL: to=<backup+073.kremels-kreme
at doamin.tld>,
> relay=dovecot, delay=398058, delays=398045/13/0/0.04, dsn=4.3.0,
> status=deferred (temporary failure. Command output: Can't open log file
> /var/log/dovecot: Permission denied )
>
> What should the permissions on /var/log/dovecot be? (they are 640
> root:wheel on FreeBSD, identical to mail.log)


Is Postfix really supposed to write to this file? Why??

Make Postfix to write it's work in it's own log file please. Let an MTA
have it's separate log file from POP3/IMAP4.

Plus, if dovecot is able to write to a file owned by root:wheel, then there
is a BIG problem right there!!!

What does your doveconf -n have?


-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft."
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20180319/7fc3a697/attachment.html>

On 2018-03-19 (13:19 MDT), Odhiambo Washington <odhiambo at gmail.com>
wrote:
> 
> What does your doveconf -n have?
imap_id_log = *
log_path = /var/log/dovecot

-- 
I have a love child who sends me hate mail

On 2018-03-19 (13:19 MDT), Odhiambo Washington <odhiambo at gmail.com>
wrote:
> 
> Plus, if dovecot is able to write to a file owned by root:wheel, then there
is a BIG problem right there!!!
Logging is generally done by syslogd, not directly by the process. So no,
dovecot is not writing to a file owned by root anymore than postfix is writing
to mail.log which is also owned by root.

In my specific case, it is rsyslogd.

-- 
"Woof bloody woof."