#607222 /usr/sbin/prayer: wrong permission of /var/log/prayer

Package:
prayer
Source:
prayer
Description:
standalone IMAP-based webmail server
Submitter:
"m-taube@gmx.de"
Date:
2024-02-26 18:33:24 UTC
Severity:
important
#607222#5
Date:
2010-12-15 19:41:02 UTC
From:
To:
The prayer package in squeeze installs /var/log/prayer with group-owner
"adm"

The Config File prayer.cf sets as default the group of prayer to nogroup.

So if you start prayer with check_directory_perms = TRUE, you will get
an Error:

Starting webmail server: prayerprayer PANICLOG:
   Failed to open panic log file: "paniclog"
   Error was: Dec 15 20:25:25 [1785] "/var/log/prayer" directory must be
owned by user "prayer", group "nogroup" and not accessible by othe0rs
  failed!

Solution: install /var/log/prayer with group-owner "nogroup"

#607222#10
Date:
2010-12-15 20:44:41 UTC
From:
To:
severity 607222 normal
thanks

On onsdagen den 15 december 2010, you stated the following:

The idea is that nobody and nogroup should be completely unprivileged, and
hence should not own _anything_. Many log files belong to group adm.
check_directory_perms is probably a bit too picky as it doesn't even accept
group root. I probably should just arrange for a group prayer to be created
and the directories assigned to it, and if you want to set
check_directory_perms=TRUE you should probably do that too for now.

#607222#15
Date:
2010-12-16 08:40:54 UTC
From:
To:
Am 15.12.2010 21:44, schrieb Magnus Holmgren:

This is ok, if you change the config
prayer_group          = "adm"
it will run.

For me this seems to be the best solution.
having
addgroup --system prayer
chgrp prayer -R /var/log/prayer
chgrp prayer -R /var/run/prayer
and prayer_group          = "prayer"

runs without error.

However, each solution (group adm or prayer) should ensure that prayer
will start up with the standard configuration out of the package and
check_directory_perms=TRUE.

mfg
Matthias Taube

#607222#20
Date:
2024-02-26 18:31:17 UTC
From:
To:
Dear submitter,

as the package prayer has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1063872

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)