Postifix errors in syslog

Submitted by bergerdm on Fri, 03/31/2017 - 16:13 Pro Licensee

I'm getting the following errors in syslog after a new install of Ubuntu 16. Do you have any suggestions as to how I might address them?

Mar 31 13:30:49 ubuntu postfix/postfix-script[9253]: warning: group or other writable: /usr/lib/postfix/./sbin/lmtp
Mar 31 13:30:49 ubuntu postfix/postfix-script[9254]: warning: group or other writable: /usr/lib/postfix/./libpostfix-tls.so.1
Mar 31 13:30:49 ubuntu postfix/postfix-script[9255]: warning: group or other writable: /usr/lib/postfix/./libpostfix-global.so.1
Mar 31 13:30:49 ubuntu postfix/postfix-script[9256]: warning: group or other writable: /usr/lib/postfix/./libpostfix-master.so.1
Mar 31 13:30:49 ubuntu postfix/postfix-script[9257]: warning: group or other writable: /usr/lib/postfix/./libpostfix-dns.so.1
Mar 31 13:30:49 ubuntu postfix/postfix-script[9258]: warning: group or other writable: /usr/lib/postfix/./libpostfix-util.so.1
Mar 31 13:30:50 ubuntu postfix/postfix-script[9259]: warning: group or other writable: /usr/lib/postfix/sbin/./lmtp
Status: 
Active

Comments

Submitted by andreychek on Fri, 03/31/2017 - 20:14

Howdy -- I'm unfortunately not sure what might cause that, though some Googling suggests that it's a bug that arises from time to time.

Are you using the latest Postfix version?

I see some recent cases where that happened, but that the bug was supposedly addressed in the most recent Postfix version for the distros in question.

Submitted by bergerdm on Sat, 04/01/2017 - 08:34 Pro Licensee

I lean on virtualmin to alert me of any updates so I would have said yes.

Ubuntu Linux 16.04.2 Postfix version 3.1.0

Submitted by andreychek on Sat, 04/01/2017 - 12:01

Is this a VPS or dedicated server?

Also, what is the output of these commands:

ls -la /usr/lib/postfix
ls -la /usr/lib/postfix/sbin

Submitted by bergerdm on Sat, 04/01/2017 - 12:27 Pro Licensee

Dedicated server.

bmp@secure5:~/public_html$ ls -la /usr/lib/postfix
total 772
drwxr-xr-x  3 root root   4096 Mar 29 00:43 .
drwxr-xr-x 67 root root   4096 Mar 29 05:53 ..
lrwxrwxrwx  1 root root     23 Apr 13  2016 libpostfix-dns.so.1 -> libpostfix-dns.so.1.0.1
-rw-r--r--  1 root root  26968 Apr 13  2016 libpostfix-dns.so.1.0.1
lrwxrwxrwx  1 root root     26 Apr 13  2016 libpostfix-global.so.1 -> libpostfix-global.so.1.0.1
-rw-r--r--  1 root root 281152 Apr 13  2016 libpostfix-global.so.1.0.1
lrwxrwxrwx  1 root root     26 Apr 13  2016 libpostfix-master.so.1 -> libpostfix-master.so.1.0.1
-rw-r--r--  1 root root  39472 Apr 13  2016 libpostfix-master.so.1.0.1
lrwxrwxrwx  1 root root     23 Apr 13  2016 libpostfix-tls.so.1 -> libpostfix-tls.so.1.0.1
-rw-r--r--  1 root root 103344 Apr 13  2016 libpostfix-tls.so.1.0.1
lrwxrwxrwx  1 root root     24 Apr 13  2016 libpostfix-util.so.1 -> libpostfix-util.so.1.0.1
-rw-r--r--  1 root root 264504 Apr 13  2016 libpostfix-util.so.1.0.1
-rwxr-xr-x  1 root root  13052 Apr 13  2016 postfix_groups.pl
-rw-r--r--  1 root root  18560 Apr 13  2016 postfix-pcre.so.1.0.1
-rw-r--r--  1 root root  14504 Apr 13  2016 postfix-sqlite.so.1.0.1
drwxr-xr-x  2 root root   4096 Mar 29 00:43 sbin

bmp@secure5:~/public_html$ ls -la /usr/lib/postfix/sbin
total 1252
drwxr-xr-x 2 root root   4096 Mar 29 00:43 .
drwxr-xr-x 3 root root   4096 Mar 29 00:43 ..
-rwxr-xr-x 1 root root  18376 Apr 13  2016 anvil
-rwxr-xr-x 1 root root  47448 Apr 13  2016 bounce
-rwxr-xr-x 1 root root 121176 Apr 13  2016 cleanup
-rwxr-xr-x 1 root root  10104 Apr 13  2016 discard
-rwxr-xr-x 1 root root  10184 Apr 13  2016 dnsblog
-rwxr-xr-x 1 root root  10104 Apr 13  2016 error
-rwxr-xr-x 1 root root  18376 Apr 13  2016 flush
-rwxr-xr-x 1 root root  10104 Apr 13  2016 fsstone
lrwxrwxrwx 1 root root      4 Apr 13  2016 lmtp -> smtp
-rwxr-xr-x 1 root root  59352 Apr 13  2016 local
-rwxr-xr-x 1 root root  38864 Apr 13  2016 master
-rwxr-xr-x 1 root root  59336 Apr 13  2016 oqmgr
-rwxr-xr-x 1 root root  14280 Apr 13  2016 pickup
-rwxr-xr-x 1 root root  22792 Apr 13  2016 pipe
-rwxr-xr-x 1 root root   9344 Apr 13  2016 postfix-script
-rwxr-xr-x 1 root root  32676 Apr 13  2016 postfix-tls-script
-rwxr-xr-x 1 root root   6543 Apr 13  2016 postfix-wrapper
-rwxr-xr-x 1 root root  29446 Apr 13  2016 post-install
-rwxr-xr-x 1 root root   9288 Apr 13  2016 postmulti-script
-rwxr-xr-x 1 root root  67528 Apr 13  2016 postscreen
-rwxr-xr-x 1 root root  18376 Apr 13  2016 proxymap
-rwxr-xr-x 1 root root  67528 Apr 13  2016 qmgr
-rwxr-xr-x 1 root root  22472 Apr 13  2016 qmqpd
-rwxr-xr-x 1 root root  14280 Apr 13  2016 scache
-rwxr-xr-x 1 root root  14392 Apr 13  2016 showq
-rwxr-xr-x 1 root root 125376 Apr 13  2016 smtp
-rwxr-xr-x 1 root root 232920 Apr 13  2016 smtpd
-rwxr-xr-x 1 root root  10184 Apr 13  2016 spawn
-rwxr-xr-x 1 root root  22712 Apr 13  2016 tlsmgr
-rwxr-xr-x 1 root root  22472 Apr 13  2016 tlsproxy
-rwxr-xr-x 1 root root  26968 Apr 13  2016 trivial-rewrite
-rwxr-xr-x 1 root root  14280 Apr 13  2016 verify
-rwxr-xr-x 1 root root  22472 Apr 13  2016 virtual

Submitted by andreychek on Sat, 04/01/2017 - 17:12

Yeah your permissions all look good.

It looks like the issues are due to symlink warnings that Postfix is generating; however, those warnings are bugs, as it shouldn't be looking for permissions issues with symlinks, only with the files they point to.

There's an example of the bug described on the Postfix mailing list here:

http://git.net/ml/general/2016-07/msg39057.html

And here is the Debian bug report here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832576

I didn't see an Ubuntu bug report in my Googling, but it sounds like it's fixed in the upstream version... that fix should work it's way down into the Ubuntu package at some point.

In the meantime, since there isn't a problem with your permissions, and it's just a symlink warning -- those messages should be safe to ignore.