1

Topic: easy deployment / RC mail / folder permissions

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): v2019071501
- Deployed with iRedMail Easy or the downloadable installer? easy
- Linux/BSD distribution name and version: ubuntu 18.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

i added a custom config to enable another plugin for rc mail. works fine BUT it complained of not having folder write permissions to the plugins directory. so i added said permission.

do you think maybe the easy deployment should apply said permissions?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: easy deployment / RC mail / folder permissions

Could you please show me the original error/warning message about the permission?

3

Re: easy deployment / RC mail / folder permissions

ZhangHuangbin wrote:

Could you please show me the original error/warning message about the permission?

I will replicate it for you asap but it may be quicker for you to:

> make sure your web server user does NOT have plugins directory write permission

> enable enigma plugin

> log into RC, go to settings > PGP keys

You should then see the error, produced by RC.

It may have been enough (and better) to simply grant permission to the exact folder the plugin wants. But I chose the entire plugins folder.

4

Re: easy deployment / RC mail / folder permissions

Enigma plugin will write the pgp keys to the directory specified in parameter:

$config['enigma_pgp_homedir'] =

This directory must be writable by web server daemon user, not the whole "plugins/" directory.
And you'd better put this directory outside the Roundcube directory so that no one can access it via http/https. for example, /var/vmail/pgp-keys/

5

Re: easy deployment / RC mail / folder permissions

ZhangHuangbin wrote:

Enigma plugin will write the pgp keys to the directory specified in parameter:

$config['enigma_pgp_homedir'] =

This directory must be writable by web server daemon user, not the whole "plugins/" directory.
And you'd better put this directory outside the Roundcube directory so that no one can access it via http/https. for example, /var/vmail/pgp-keys/

Didn’t think to check it’s config file. Thank you. That makes perfect sense. Will do. Cheers!