Kopano spamd error - PermissionError: [Errno 1] Operation not permitted

mark dufour

which version of python3-daemon are you using? so we can try to reproduce the problem here…

@mark-dufour

Hi mark i am using python3.6.

iam starting the service like this

0_1547131538467_671c1cb3-539f-4645-aa24-3df9199628b9-image.png

BMWfan

@mark-dufour here is the needed output from a Debian 9 Server:

$ pip3.5 list
Package           Version
----------------- -------
python-daemon     2.1.1

@BMWfan

hi here is mine

0_1547151908400_4fe8c8ba-334f-4ae4-ab0d-b9ee05ddfa22-image.png

thctlo

Check if the rights are correct for the user that is running the spam daemon.
@ckruijntjens

The systemd config of inotify-spamleard looks good, except the user/group.
it might be ok, but check the full path rights off : /var/lib/kopano/spamd/spam
In this folder check if folder spamd is acceccable (RWX) buy kopano user and group and same for the spam folder
of test with a 777 on the folders and check what happens.

@thctlo

hi i indeed allredeay gave the folders 777 permissions however same issue.

0_1547192328519_9ddb7d4e-2d67-4c4b-aebe-0d4e8063e620-image.png

0_1547192392867_d395a25a-db02-497c-8438-98f7d46d84bb-image.png

thctlo

hmm, you still have the "operation not permitted message.

Show me also the next folder content : /var/lib/kopano/spamd/spam

fbartels

On a Debian system you have to be member of a group to chown to that group. The permissions on the file do not matter for that.

@thctlo

that folder is also 777. i use a centos 7 system

@fbartels

do i need to add rspamd group to kopano?

fbartels

since you antispam system is not running on the same user, this setting is kind of useless for you (only required for the local programm to have read/write access to it). I would just set sa_group to kopano.

thctlo

Yes, you probley need to add rspamd to the kopano group.
Can you run : systemctl show | grep -i protect

it might be a case of ProtectSystem= ( sandboxing within systemd)

@fbartels

if i do this is inotify-learnspam still doing its part?

@fbartels

hi yust tried and still have this error

0_1547195438591_bab7513c-ec56-471f-9d8e-883bac170565-image.png

fbartels

@ckruijntjens said in Kopano spamd error - PermissionError: [Errno 1] Operation not permitted:

if i do this is inotify-learnspam still doing its part?

I have not completely followed the other topic, but there was something about the antispam system running on a different system and the need to pipe/copy the mail to the other system. so if the message needs to cross systems local ownership is not really relevant.

@ckruijntjens said in Kopano spamd error - PermissionError: [Errno 1] Operation not permitted:

hi yust tried and still have this error

Above i posted a command to test the chown.

@fbartels

hi i have rspamd and kopano on the same system. now if i check the logs when i change the sa user to kopano it only gives me a warning in journalctl.

0_1547196540694_4d90850d-6e06-4bb4-8993-0fbf653aa8c6-image.png

connection refused?

itis working now.

BMWfan

@ckruijntjens and what was now the solution? My problem is on the kopano-spamd process and you mixed your problems with inotify also in this topic why i lost a little the overview here.

On my Debian 9 Server:

If i choose a mail in mail inbox to sort it in the junk mail folder i get this messages in /var/log/kopano/spamd.log:

2019-01-12 08:17:57,330 - spamd - INFO - Learning message as SPAM, entryid: 00000000A497753E7B1B4CE3894BB06ABB7C1F450100000005000000D451EC976A324DCAA23AF88AB788EAD800000000
2019-01-12 08:17:57,356 - spamd - ERROR - Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/kopano/log.py", line 103, in log_exc
    try: yield
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 83, in update
    self.learn(item, searchkey, True)
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 106, in learn
    os.chown(emlfilename, uid, gid)
PermissionError: [Errno 1] Operation not permitted: '/var/lib/kopano/spamd/spam/9DFD4A4E633343C081465B7B8EDBCBE4.eml'

i installed the python 3 deamon via apt-get install python3-daemon.

I have spamassassin, clamav and amavis running that’s why i assigned kopano to the amavis group via gpasswd -a kopano amavis.

i can execute this command sudo -H -u kopano chown kopano:amavis /var/lib/kopano/spamd/spam/9DFD4A4E633343C081465B7B8EDBCBE4.eml
so the rights should be correct, or?

So, what could it be?

cblaha

What @BMWfan describes is exactly the origin problem.

@BMWfan

Hi,
Wat i did was adding kopano to my rspamd group and rspamd to kopano group.

The sa_group is kopano

Now its working for me