Kopano spamd error - PermissionError: [Errno 1] Operation not permitted

[cblaha]

@fbartels: I’ve installed python3-daemon via apt-get but I get the error already.

[BMWfan]

@ashceryth yes, but i doesn’t work.

[BMWfan]

@fbartels have you changed more then only installing the python-deamon?

[thctlo]

try both
apt install python-daemon python3-daemon

and/or
apt install python-daemonize python3-daemonize

And what are the rights on : /var/lib/kopano/spamd/spam/
i havent looked at my system, but the rights are probley 755
you can try
chmod -R 1770 /var/lib/kopano/spamd

adduser spamassassin kopano
adduser amavis kopano

restart spamassassin and amavis

[cblaha]

I’ve now installed

python-daemon, python3-daemon,python-daemonize, python3-daemonize

but i got always the same error message.

I always changed the permission on /var/lib/kopano/spamd and add the user to the group kopano.

[BMWfan]

@thctlo i’ve already done and now again without any progress depending on the failure.

[A Former User]

i have the same problem on centos 7.

2019-01-09 21:08:27,656 - spamd - ERROR - Traceback (most recent call last):
File “/usr/lib/python2.7/site-packages/kopano/log.py”, line 103, in log_exc
try: yield
File “/usr/lib/python2.7/site-packages/kopano_spamd/init.py”, line 83, in update
self.learn(item, searchkey, True)
File “/usr/lib/python2.7/site-packages/kopano_spamd/init.py”, line 106, in learn
os.chown(emlfilename, uid, gid)
OSError: [Errno 1] Operation not permitted: ‘/var/lib/kopano/spamd/spam/EEEE4E84C38D4D4DAC3EC2BCA3CD477A.eml’

[mark dufour]

which version of python3-daemon are you using? so we can try to reproduce the problem here…

[A Former User]

@mark-dufour

Hi mark i am using python3.6.

iam starting the service like this

[BMWfan]

@mark-dufour here is the needed output from a Debian 9 Server:

$ pip3.5 list
Package           Version
----------------- -------
python-daemon     2.1.1

[A Former User]

@BMWfan

hi here is mine

[thctlo]

Check if the rights are correct for the user that is running the spam daemon.
@ckruijntjens

The systemd config of inotify-spamleard looks good, except the user/group.
it might be ok, but check the full path rights off : /var/lib/kopano/spamd/spam
In this folder check if folder spamd is acceccable (RWX) buy kopano user and group and same for the spam folder
of test with a 777 on the folders and check what happens.

[A Former User]

@thctlo

hi i indeed allredeay gave the folders 777 permissions however same issue.

[thctlo]

hmm, you still have the "operation not permitted message.

Show me also the next folder content : /var/lib/kopano/spamd/spam

[fbartels]

On a Debian system you have to be member of a group to chown to that group. The permissions on the file do not matter for that.

[A Former User]

@thctlo

that folder is also 777. i use a centos 7 system

[A Former User]

@fbartels

do i need to add rspamd group to kopano?

[fbartels]

since you antispam system is not running on the same user, this setting is kind of useless for you (only required for the local programm to have read/write access to it). I would just set sa_group to kopano.

[thctlo]

Yes, you probley need to add rspamd to the kopano group.
Can you run : systemctl show | grep -i protect

it might be a case of ProtectSystem= ( sandboxing within systemd)

[A Former User]

@fbartels

if i do this is inotify-learnspam still doing its part?