Strange postfix warnings perfect-server-ubuntu-with-nginx-and-ispconfig-3

Discussion in 'Installation/Configuration' started by Loveless, Apr 8, 2017.

  1. Loveless

    Loveless Member

    ISPConfig Version: 3.1.2
    Operating System: Ubuntu 16.04.2 LTS
    Postfix Version 3.1.0

    After installation following https://www.howtoforge.com/tutorial/perfect-server-ubuntu-with-nginx-and-ispconfig-3/ I get this:
    Code:
    hostname# /etc/init.d/postfix check
    postfix: Postfix is running with backwards-compatible default settings
    postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
    postfix: To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload"
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./sbin/lmtp
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./libpostfix-global.so.1
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./libpostfix-master.so.1
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./libpostfix-tls.so.1
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./libpostfix-dns.so.1
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/./libpostfix-util.so.1
    postfix/postfix-script: warning: group or other writable: /usr/lib/postfix/sbin/./lmtp
    
    After doing some research on this I found that the debian repo should have been patched against this (while it is clearly not). They're saying it has to do with the symlinks not using the permissions of the targets;
    Code:
    /usr/lib/postfix# ll
    total 780
    drwxr-xr-x  5 root root   4096 Apr  5 22:19 ./
    drwxr-xr-x 66 root root   4096 Apr  6 12:17 ../
    lrwxrwxrwx  1 root root     23 Apr 13  2016 libpostfix-dns.so.1 -> libpostfix-dns.so.1.0.1*
    -r-x------  1 root root  26968 Apr 13  2016 libpostfix-dns.so.1.0.1*
    lrwxrwxrwx  1 root root     26 Apr 13  2016 libpostfix-global.so.1 -> libpostfix-global.so.1.0.1*
    -r-x------  1 root root 281152 Apr 13  2016 libpostfix-global.so.1.0.1*
    lrwxrwxrwx  1 root root     26 Apr 13  2016 libpostfix-master.so.1 -> libpostfix-master.so.1.0.1*
    -r-x------  1 root root  39472 Apr 13  2016 libpostfix-master.so.1.0.1*
    lrwxrwxrwx  1 root root     23 Apr 13  2016 libpostfix-tls.so.1 -> libpostfix-tls.so.1.0.1*
    -r-x------  1 root root 103344 Apr 13  2016 libpostfix-tls.so.1.0.1*
    lrwxrwxrwx  1 root root     24 Apr 13  2016 libpostfix-util.so.1 -> libpostfix-util.so.1.0.1*
    -r-x------  1 root root 264504 Apr 13  2016 libpostfix-util.so.1.0.1*
    -rwxr-xr-x  1 root root  13052 Apr 13  2016 postfix_groups.pl*
    -rw-r--r--  1 root root  18736 Apr 13  2016 postfix-mysql.so.1.0.1
    drwxr-xr-x  2 root root   4096 Apr  5 21:57 postfix-script/
    -rw-r--r--  1 root root  14504 Apr 13  2016 postfix-sqlite.so.1.0.1
    drwxr-xr-x  2 root root   4096 Apr  5 22:17 sbin/
    drwxr-xr-x  2 root root   4096 Apr  5 20:48 showq/
    
    and
    Code:
    /usr/lib/postfix/sbin# ll
    total 1252
    drwxr-xr-x 2 root root   4096 Apr  5 22:17 ./
    drwxr-xr-x 5 root root   4096 Apr  5 22:19 ../
    -rwxr-xr-x 1 root root  18376 Apr 13  2016 anvil*
    -rwxr-xr-x 1 root root  47448 Apr 13  2016 bounce*
    -rwxr-xr-x 1 root root 121176 Apr 13  2016 cleanup*
    -rwxr-xr-x 1 root root  10104 Apr 13  2016 discard*
    -rwxr-xr-x 1 root root  10184 Apr 13  2016 dnsblog*
    -rwxr-xr-x 1 root root  10104 Apr 13  2016 error*
    -rwxr-xr-x 1 root root  18376 Apr 13  2016 flush*
    -rwxr-xr-x 1 root root  10104 Apr 13  2016 fsstone*
    lrwxrwxrwx 1 root root      4 Apr 13  2016 lmtp -> smtp*
    -rwxr-xr-x 1 root root  59352 Apr 13  2016 local*
    -rwxr-xr-x 1 root root  38864 Apr 13  2016 master*
    -rwxr-xr-x 1 root root  59336 Apr 13  2016 oqmgr*
    -rwxr-xr-x 1 root root  14280 Apr 13  2016 pickup*
    -rwxr-xr-x 1 root root  22792 Apr 13  2016 pipe*
    -rwxr-xr-x 1 root root   9344 Apr 13  2016 postfix-script*
    -rwxr-xr-x 1 root root  32676 Apr 13  2016 postfix-tls-script*
    -rwxr-xr-x 1 root root   6543 Apr 13  2016 postfix-wrapper*
    -rwxr-xr-x 1 root root  29446 Apr 13  2016 post-install*
    -rwxr-xr-x 1 root root   9288 Apr 13  2016 postmulti-script*
    -rwxr-xr-x 1 root root  67528 Apr 13  2016 postscreen*
    -rwxr-xr-x 1 root root  18376 Apr 13  2016 proxymap*
    -rwxr-xr-x 1 root root  67528 Apr 13  2016 qmgr*
    -rwxr-xr-x 1 root root  22472 Apr 13  2016 qmqpd*
    -rwxr-xr-x 1 root root  14280 Apr 13  2016 scache*
    -rwxr-xr-x 1 root root  14392 Apr 13  2016 showq*
    -r-xr-xr-x 1 root root 125376 Apr 13  2016 smtp*
    -rwxr-xr-x 1 root root 232920 Apr 13  2016 smtpd*
    -rwxr-xr-x 1 root root  10184 Apr 13  2016 spawn*
    -rwxr-xr-x 1 root root  22712 Apr 13  2016 tlsmgr*
    -rwxr-xr-x 1 root root  22472 Apr 13  2016 tlsproxy*
    -rwxr-xr-x 1 root root  26968 Apr 13  2016 trivial-rewrite*
    -rwxr-xr-x 1 root root  14280 Apr 13  2016 verify*
    -rwxr-xr-x 1 root root  22472 Apr 13  2016 virtual*
    
    I know this isn't directly related to ISPconfig, but I'd thought I'd mention it so others can find it.
     
  2. ahrasis

    ahrasis Active Member

    I think you can just run the command as advised i.e. "postconf compatibility_level=2" and "postfix reload" and they should fix the warnings.
     
  3. Loveless

    Loveless Member

    The compatibility_level=2 mention has nothing to do with the warnings. This is just what postfix tells you when you have older config options in your main.cf, like ISPconfig has.
     
  4. ahrasis

    ahrasis Active Member

    Sorry but for me the warning come with a clear advise:
    So, unless one really wants backwards compatibility, one should apply the suggested advise.
     
  5. Loveless

    Loveless Member

    That's actually bad advice, since ISPconfig still requires backwards compatibility. And again: This compatibility mention has nothing to do with the warnings about the symlink permissions.
     
  6. ahrasis

    ahrasis Active Member

    I was saying about the compatibility warnings and not the others. Personally, I do not get the compatibility warnings or have issues with ISPC nor postfix after I follow the advice, as I also run ISPC update again thereafter.

    About other warnings you mentioned, unless I am wrong, I think they can safely be ignored for the time being (until official fixes are available).
     

Share This Page