Documentation enhancement: Adjusting DB file permissions after upgrade to 2.5

2 msg	Duplicate messages with always_bcc
14 msg	[OT] Saving outgoing email Gmail style
3 msg	451 error
10 msg	Postfix 2.5 release candidate (and 2.6 snapshot...
2 msg	postfix errors when sending smtp auth via yahoo

Documentation enhancement: Adjusting DB file pe...
\ Jan P. Kessler (15 Jan 2008)
. \ (Wietse Venema) (15 Jan 2008)
. . \ Jan P. Kessler (15 Jan 2008)
. . . \ (Wietse Venema) (15 Jan 2008)

11 msg	I don't want Postfix to confirm users via telnet
3 msg	Question on Earthlink and dnsbl.sorbs.net
36 msg	Re: Enforced Outbound TLS (part deux)
6 msg	smtpd_proxy_filter to unix: problem
4 msg	Again troubles with postfix and cyrus-sasl
3 msg	Exclude local host from smtpd_proxy_filter
4 msg	transport nexthop nexthop
3 msg	TLS has been selected, but TLS support is not c...
2 msg	Which documentation to read for this..
4 msg	Exchange 2003 to Postfix maildir migration
7 msg	virtual_mailbox_base & LDAP
12 msg	Enforced Outbound TLS
2 msg	postfix+maildrop error
10 msg	Outgoing IP address

Subject:	Documentation enhancement: Adjusting DB file permissions after upgrade to 2.5
Group:	Postfix-users
From:	Jan P. Kessler
Date:	15 Jan 2008

Dear all,

yesterday I performed a postfix upgrade from 2.4.6 -> 2.5-20080109. We
use recipient verification on that system. After the upgrade I noticed
that the address_verify_map was not accessible anymore:

an 15 16:26:12 mail postfix/verify[3121]: fatal: open database
/var/spool/postfix-cache/db_address_verify.db: Bad file descriptor
Jan 15 16:26:13 mail postfix/master[658]: warning: process
/usr/local/postfix/libexec/verify pid 3121 exit status 1
Jan 15 16:26:13 mail postfix/master[658]: warning:
/usr/local/postfix/libexec/verify: bad command startup -- throttling

The upgrade was performed the "usual way" (make tidy; make makefiles
...; make; make upgrade). The format of the DB is btree.

After taking a closer look I found the file needs new permissions
(writable for postfix user). The old file had root:root and therefore
the new postfix version had no write access to it. Same thing for the
TLS cache DBs.

Later I found this within the release notes:
--------- snip ----------
The tlsmgr(8) and verify(8) servers no longer use root privileges when
opening the address_verify_map, *_tls_session_cache_database, and
tls_random_exchange_name cache files. This avoids a potential security
loophole where the ownership of a file (or directory) does not match the
trust level of the content of that file (or directory).
--------- snip ----------

What do you think - would it be worth to add a note that because of this
the permissions of address_verify_map and
smtp[*]_tls_session_cache_database have to be adjusted?

Brgds, Jan