dovecot - Dec 2014 - Sieve permissions issue following update

I recently updated dovecot and my sieve filters stopped working.  Checking the
logs I see:

Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve:
binary save: failed to create temporary file:
open(/usr/local/etc/dovecot/sieve/10-move-spam.svbin.mailhost.domain.com.114.)
failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm:
/usr/local/etc/dovecot/sieve, we're not in group 6(mail), dir owned by 143:6
mode=0775)

Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve: The
LDA Sieve plugin does not have permission to save global Sieve script binaries;
global Sieve scripts like `/usr/local/etc/dovecot/sieve/10-move-spam.sieve'
need to be pre-compiled using the sievec tool


However this fairly clear advice on the failure seems to be contradicted by:

 # id vmail
uid=5000(vmail) gid=5000(vmail) groups=5000(vmail),6(mail)

?


dovecot-pigeonhole-0.4.6           =   up-to-date with index
dovecot2-2.2.15_1                  =   up-to-date with index


uname -a
FreeBSD host.domain.com 9.3-RELEASE FreeBSD 9.3-RELEASE #0 r268932: Mon Jul 21
15:51:38 PDT 2014     gessel at
host1.domain.com:/usr/obj/usr/src/sys/BARCELONA-13-08  amd64

On 12/09/2014 05:35 PM, David Gessel wrote:
> I recently updated dovecot and my sieve filters stopped working.  Checking
the logs I see:
> 
> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve:
binary save: failed to create temporary file:
open(/usr/local/etc/dovecot/sieve/10-move-spam.svbin.mailhost.domain.com.114.)
failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm:
/usr/local/etc/dovecot/sieve, we're not in group 6(mail), dir owned by 143:6
mode=0775)
> 
> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error: sieve:
The LDA Sieve plugin does not have permission to save global Sieve script
binaries; global Sieve scripts like
`/usr/local/etc/dovecot/sieve/10-move-spam.sieve' need to be pre-compiled
using the sievec tool
> 
> 
As mentioned in the error message from your logs and in the wiki
<http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage#Manually_Compiling_Sieve_Scripts>:

	To mitigate this problem, the administrator must manually
	pre-compile global scripts using the sievec command line tool.


Regards,
Pascal
-- 
The trapper recommends today: defaced.1434318 at localdomain.org

It has been running flawlessly for quite some time until the update.  

Global scripts were compiled:

/usr/local/etc/dovecot/sieve # ls
10-move-spam.sieve      10-move-spam.svbin

However, I ran sievec again and tried saving a modified script and got the same:

shiofuki dovecot: lda(gessel at blackrosetech.com): Error: sieve: binary save:
failed to create temporary file:
open(/usr/local/etc/dovecot/sieve/10-move-spam.svbin.shiofuki.blackrosetech.com.96421.)
failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm:
/usr/local/etc/dovecot/sieve, we're not in group 6(mail), dir owned by 143:6
mode=0775)
Dec  9 11:30:39 shiofuki dovecot: lda(gessel at blackrosetech.com): Error:
sieve: The LDA Sieve plugin does not have permission to save global Sieve script
binaries; global Sieve scripts like
`/usr/local/etc/dovecot/sieve/10-move-spam.sieve' need to be pre-compiled
using the sievec tool


I use Thomas Schmid's Sieve 0.2.3d add on to Thunderbird, if that might have
any significance.

Compiling with sievec shouldn't change the permission error, which I still
don't understand.




-------- Original Message --------
Subject: Re: Sieve permissions issue following update
From: Pascal Volk <user+dovecot at localhost.localdomain.org>
To: Dovecot Mailing List <dovecot at dovecot.org>
Date: Tue Dec 09 2014 20:45:00 GMT+0300 (Arabic Standard Time)
> On 12/09/2014 05:35 PM, David Gessel wrote:
>> I recently updated dovecot and my sieve filters stopped working. 
Checking the logs I see:
>>
>> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error:
sieve: binary save: failed to create temporary file:
open(/usr/local/etc/dovecot/sieve/10-move-spam.svbin.mailhost.domain.com.114.)
failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm:
/usr/local/etc/dovecot/sieve, we're not in group 6(mail), dir owned by 143:6
mode=0775)
>>
>> Dec  9 00:09:59 mailhost dovecot: lda(gessel at domain.com): Error:
sieve: The LDA Sieve plugin does not have permission to save global Sieve script
binaries; global Sieve scripts like
`/usr/local/etc/dovecot/sieve/10-move-spam.sieve' need to be pre-compiled
using the sievec tool
>>
>>
> 
> As mentioned in the error message from your logs and in the wiki
>
<http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage#Manually_Compiling_Sieve_Scripts>:
> 
> 	To mitigate this problem, the administrator must manually
> 	pre-compile global scripts using the sievec command line tool.
> 
> 
> Regards,
> Pascal
>