Postfix Files that shouldn't be writable.

[Makoa Jacobsen]

When making configuration changes to postfix, the following error messages are generated in the mail log:

Jul 22 08:57:25 kula-dev postfix/qmgr[30213]: 40C6C4051E: removed
Jul 22 08:57:41 kula-dev postfix/postfix-script[30343]: warning: group or other writable: /usr/lib/postfix/./sbin/lmtp
Jul 22 08:57:41 kula-dev postfix/postfix-script[30344]: warning: group or other writable: /usr/lib/postfix/./libpostfix-dns.so.1
Jul 22 08:57:41 kula-dev postfix/postfix-script[30345]: warning: group or other writable: /usr/lib/postfix/./libpostfix-util.so.1
Jul 22 08:57:41 kula-dev postfix/postfix-script[30346]: warning: group or other writable: /usr/lib/postfix/./libpostfix-tls.so.1
Jul 22 08:57:41 kula-dev postfix/postfix-script[30347]: warning: group or other writable: /usr/lib/postfix/./libpostfix-global.so.1
Jul 22 08:57:41 kula-dev postfix/postfix-script[30348]: warning: group or other writable: /usr/lib/postfix/./libpostfix-master.so.1
Jul 22 08:57:41 kula-dev postfix/postfix-script[30349]: warning: group or other writable: /usr/lib/postfix/sbin/./lmtp

These are symbolic links, which link to files that are properly permissioned:

lrwxrwxrwx 1 root root 23 Apr 13 2016 libpostfix-dns.so.1 -> libpostfix-dns.so.1.0.1
-rw-r--r-- 1 root root 26968 Apr 13 2016 libpostfix-dns.so.1.0.1
lrwxrwxrwx 1 root root 26 Apr 13 2016 libpostfix-global.so.1 -> libpostfix-global.so.1.0.1
-rw-r--r-- 1 root root 281152 Apr 13 2016 libpostfix-global.so.1.0.1
lrwxrwxrwx 1 root root 26 Apr 13 2016 libpostfix-master.so.1 -> libpostfix-master.so.1.0.1
-rw-r--r-- 1 root root 39472 Apr 13 2016 libpostfix-master.so.1.0.1
lrwxrwxrwx 1 root root 23 Apr 13 2016 libpostfix-tls.so.1 -> libpostfix-tls.so.1.0.1
-rw-r--r-- 1 root root 103344 Apr 13 2016 libpostfix-tls.so.1.0.1
lrwxrwxrwx 1 root root 24 Apr 13 2016 libpostfix-util.so.1 -> libpostfix-util.so.1.0.1
-rw-r--r-- 1 root root 264504 Apr 13 2016 libpostfix-util.so.1.0.1
-rwxr-xr-x 1 root root 13052 Apr 13 2016 postfix_groups.pl
-rw-r--r-- 1 root root 14504 Apr 13 2016 postfix-sqlite.so.1.0.1
drwxr-xr-x 2 root root 4096 Jul 22 08:55 sbin

I've read on the Internet it is a known issue in this version of postfix. Wondering if there will be an update to this problem in the 3.1.0-3 Ubuntu:16.04/xenial package.

http://postfix.1071664.n5.nabble.com/Warning-group-or-other-writeable-td87817.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832576

[Scott Kitterman (kitterman)]

It was fixed in Debian later, but it's harmless. Because these are symlinks
(which the script doesn't follow), the permissions it detects aren't the
actual permissions. The 'fix' is not to emit the warnings for this. You can
ignore them.

[Robie Basak (racb)]

As this was fixed in 3.1.4-1 in Debian, I believe this has been fixed since Zesty.

Since the bug in Xenial is spurious warnings only, I don't think an update is justified. If you disagree, feel free to make your case here.