Procmail ownership

OS type and version Debian Linux 11
Webmin version 2.013
Usermin version 1.861
Virtualmin version 7.5
Theme version 20.13
Package updates All installed packages are up to date

Most reasonable reasonable explanation is a system update. Mail seems fine. The biggest ‘issue’ right now is that the Virtualmin check script seems to stop there and doesn’t seem to finish.

The procmail command /usr/bin/procmail is owned by group mail, when it should be owned by root. Email may not be properly delivered or checked for spam

You’re two steps past the problem.

Why did you configure Postfix to use procmail directly instead of our procmail-wrapper?

I didn’t that I know of. I’ll have to check and see if any of the settings look like something I would have changed.

No way this was a manual edit on my part.

I added some things to transport for Mailman3 but that was about it. Any other places I could have ticked something that would have changed it? Mail filtering perhaps? = procmail -a "$EXTENSION" an expensive shell process. Procmail alone is expensive enough. = /usr/bin/procmail = /usr/bin/procmail -a "$EXTENSION"


If you installed via our install script, you would have gotten MDA configured to use procmail-wrapper. Unless this is an ARM system, in which case, you can’t use procmail (it’s not safe to use it the way we use it without the wrapper).

The default mailbox_command on a Virtualmin system is /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME

But, you should figure out what you did to change it, as only root can change it, and so…if you didn’t do it, something or someone else did. Or, your installation didn’t complete successfully (there would have been errors, or it wouldn’t have shown all steps completed…there’s a running tally of steps that have run so it’s easy to know it actually completed).

This, of course, assumes you have /usr/bin/procmail-wrapper on your system. If installed with the install script, then it would be. Again, unless you’re on ARM, in which case, you shouldn’t be doing mail the way we do it, unless you build the procmail-wrapper yourself.

We’ll eventually have repos for ARM, but I haven’t had time to set that up and take on maintaining all the packages and such.

1 Like

I’ve run the check config script several times and it completed. I think just last week. This is weird. I do have the wrapper on the system.

And yes. This is at least the second install and it was from the official script. I’ve chimed in on a few threads about Debian 11 that it worked just fine for me.

To be clear. This whole line goes into the the box for external command to use…

/usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME

Yep, that’s the line.

Didn’t we just have a conversation about how you “restored Postfix from backup”? Maybe this was also part of that?

Yeah, but I don’t think I would have ever edited that line. But, who knows. The syntax of that line is pretty foreign to me.

Thanks for your help. Much appreciated.

I wonder if early on I might have done a dpkg-reconfigure postfix? Only thing I can think of I might have done. So, then the restore. But, we passed the config check.

Thanks again.

EDIT: Good thing I asked instead of just changing the permissions on the file and rerunning the check.

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.