Date: Thu, 04 Dec 2025 14:11:26 +0000
To: "u.alpine.users@lists.alpinelinux.org" <u.alpine.users@lists.alpinelinux.org>
From: paradoor <paradoor@protonmail.com>
Subject: Re: Dovecot safe_mkstemp permission denied after 3.23 upgrade
Message-ID: <YvvfpWuHDt4CcOy7_cGAUvB_Mcs7SxbUYE8UOAnMuAG8D19oHx9TrW4pvbwn6x7HuKKVf86vagFs0B3AWSH0-ovLNDFJqbvQmTlT_GlaL5A=@protonmail.com>
In-Reply-To: <FHpoFoQ39ALtzJ2muIrncOkmhWHDjuoSHD9L4OVPC_wGRPlY_Rz-VX8YvKfYLUkvHtVBw9bLT8BOmYG36NlBO7fzbMyXEpu5uknQYuv5PgU=@protonmail.com>
References: <FHpoFoQ39ALtzJ2muIrncOkmhWHDjuoSHD9L4OVPC_wGRPlY_Rz-VX8YvKfYLUkvHtVBw9bLT8BOmYG36NlBO7fzbMyXEpu5uknQYuv5PgU=@protonmail.com>
Feedback-ID: 27605773:user:proton
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha512; boundary="------7d38af981232879ce1d9b751f5536d439a2668b62ca59e0340979406be30dd9c"; charset=utf-8

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------7d38af981232879ce1d9b751f5536d439a2668b62ca59e0340979406be30dd9c
Content-Type: multipart/mixed;boundary=---------------------bd889804aac081a056c83ed9a76633f6

-----------------------bd889804aac081a056c83ed9a76633f6
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;charset=utf-8

> Hi,
> =


> I updated to Alpine 3.23 and noticed that after the update, Dovecot fail=
s to start, with the output:
> =


> `doveconf: Error: safe_mkstemp(/tmp/doveconf.) failed: Permission denied=
 doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: F=
ailed to write binary config file`
> =


> I am able to run `mktemp` as both a normal user and as root just fine. O=
utput of `ls -ld /tmp`:
> =


> `drwxrwxrwt 4 root root 80 Dec 4 12:54 /tmp`
> =


> Is anyone else having the same problem? Any ideas how to resolve this?
> =


> Thanks!

Resolved: the upgrade added back Dovecot apparmor profiles I removed. Remo=
ving the Dovecot AppArmor profiles allows Dovecot to start again.
-----------------------bd889804aac081a056c83ed9a76633f6--

--------7d38af981232879ce1d9b751f5536d439a2668b62ca59e0340979406be30dd9c
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wrsEARYKAG0FgmkxloEJECQuTBwBz8XHRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmdQvuVLuWtyT7ZFrJnNtbRcwuMyS8ps66ViEVOH
r4NGSBYhBFS/yI8bRv8QqoxytiQuTBwBz8XHAACOkgD/ftQrdVwc/NaCGWGD
yxpShtZAwGx5T54FS0dCnUhXc/EA/3V9KkOpTU5GYcPuxfhdyGGYeDX1wFff
bdJkhUU0q8ED
=DA98
-----END PGP SIGNATURE-----


--------7d38af981232879ce1d9b751f5536d439a2668b62ca59e0340979406be30dd9c--