Subject: Dovecot safe_mkstemp permission denied after 3.23 upgrade

From: paradoor <[email-masked]>
Date: Thu, 04 Dec 2025 13:08:48 +0000

Hi,

I updated to Alpine 3.23 and noticed that after the update, Dovecot fails to start, with the output:

```
doveconf: Error: safe_mkstemp(/tmp/doveconf.) failed: Permission denied
doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: Failed to write binary config file
```

I am able to run `mktemp` as both a normal user and as root just fine. Output of `ls -ld /tmp`:

```
drwxrwxrwt    4 root     root            80 Dec  4 12:54 /tmp
```

Is anyone else having the same problem? Any ideas how to resolve this?

Thanks!

---

From: paradoor <[email-masked]>
Date: Thu, 04 Dec 2025 14:11:26 +0000

> `doveconf: Error: safe_mkstemp(/tmp/doveconf.) failed: Permission denied doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: Failed to write binary config file`
> 

> `drwxrwxrwt 4 root root 80 Dec 4 12:54 /tmp`
> 

> Thanks!

Resolved: the upgrade added back Dovecot apparmor profiles I removed. Removing the Dovecot AppArmor profiles allows Dovecot to start again.