Kopano spamd error - PermissionError: [Errno 1] Operation not permitted

[A Former User]

@mark-dufour

Hi mark i am using python3.6.

iam starting the service like this

[BMWfan]

@mark-dufour here is the needed output from a Debian 9 Server:

$ pip3.5 list
Package           Version
----------------- -------
python-daemon     2.1.1

[A Former User]

@BMWfan

hi here is mine

[thctlo]

Check if the rights are correct for the user that is running the spam daemon.
@ckruijntjens

The systemd config of inotify-spamleard looks good, except the user/group.
it might be ok, but check the full path rights off : /var/lib/kopano/spamd/spam
In this folder check if folder spamd is acceccable (RWX) buy kopano user and group and same for the spam folder
of test with a 777 on the folders and check what happens.

[A Former User]

@thctlo

hi i indeed allredeay gave the folders 777 permissions however same issue.

[thctlo]

hmm, you still have the "operation not permitted message.

Show me also the next folder content : /var/lib/kopano/spamd/spam

[fbartels]

On a Debian system you have to be member of a group to chown to that group. The permissions on the file do not matter for that.

[A Former User]

@thctlo

that folder is also 777. i use a centos 7 system

[A Former User]

@fbartels

do i need to add rspamd group to kopano?

[fbartels]

since you antispam system is not running on the same user, this setting is kind of useless for you (only required for the local programm to have read/write access to it). I would just set sa_group to kopano.

[thctlo]

Yes, you probley need to add rspamd to the kopano group.
Can you run : systemctl show | grep -i protect

it might be a case of ProtectSystem= ( sandboxing within systemd)

[A Former User]

@fbartels

if i do this is inotify-learnspam still doing its part?

[A Former User]

@fbartels

hi yust tried and still have this error

[fbartels]

@ckruijntjens said in Kopano spamd error - PermissionError: [Errno 1] Operation not permitted:

if i do this is inotify-learnspam still doing its part?

I have not completely followed the other topic, but there was something about the antispam system running on a different system and the need to pipe/copy the mail to the other system. so if the message needs to cross systems local ownership is not really relevant.

@ckruijntjens said in Kopano spamd error - PermissionError: [Errno 1] Operation not permitted:

hi yust tried and still have this error

Above i posted a command to test the chown.

[A Former User]

@fbartels

hi i have rspamd and kopano on the same system. now if i check the logs when i change the sa user to kopano it only gives me a warning in journalctl.

connection refused?

[A Former User]

itis working now.

[BMWfan]

@ckruijntjens and what was now the solution? My problem is on the kopano-spamd process and you mixed your problems with inotify also in this topic why i lost a little the overview here.

On my Debian 9 Server:

If i choose a mail in mail inbox to sort it in the junk mail folder i get this messages in /var/log/kopano/spamd.log:

2019-01-12 08:17:57,330 - spamd - INFO - Learning message as SPAM, entryid: 00000000A497753E7B1B4CE3894BB06ABB7C1F450100000005000000D451EC976A324DCAA23AF88AB788EAD800000000
2019-01-12 08:17:57,356 - spamd - ERROR - Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/kopano/log.py", line 103, in log_exc
    try: yield
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 83, in update
    self.learn(item, searchkey, True)
  File "/usr/lib/python3/dist-packages/kopano_spamd/__init__.py", line 106, in learn
    os.chown(emlfilename, uid, gid)
PermissionError: [Errno 1] Operation not permitted: '/var/lib/kopano/spamd/spam/9DFD4A4E633343C081465B7B8EDBCBE4.eml'

i installed the python 3 deamon via apt-get install python3-daemon.

I have spamassassin, clamav and amavis running that’s why i assigned kopano to the amavis group via gpasswd -a kopano amavis.

i can execute this command sudo -H -u kopano chown kopano:amavis /var/lib/kopano/spamd/spam/9DFD4A4E633343C081465B7B8EDBCBE4.eml
so the rights should be correct, or?

So, what could it be?

[cblaha]

What @BMWfan describes is exactly the origin problem.

[A Former User]

@BMWfan

Hi,
Wat i did was adding kopano to my rspamd group and rspamd to kopano group.

The sa_group is kopano

Now its working for me

[cblaha]

Hi, the hint of @ckruijntjens was the last piece of the puzzle to the solution. After changing sa_group to kopano, kopano-spamd runs without errors.