sasldb should belong to the group saslauth for other services to be able to access

Makefile

 all: saslauthd-service saslauthd-service
+	rm /etc/group
+	mv -v /data/etc/group /etc/group
+	rm /etc/shadow
+	mv -v /data/etc/gshadow /etc/gshadow
+	groupadd -g 76 saslauth
+	rm /etc/group-
+	rm /etc/gshadow-
+	mv -v /etc/group /data/etc/group
+	ln -sv /data/etc/group /etc/group
+	mv -v /etc/gshadow /data/etc/gshadow
+	ln -sv /data/etc/gshadow /etc/gshadow
 	tar xf cyrus-sasl-2.1.27.tar.gz
 	cd cyrus-sasl-2.1.27 && ./configure --prefix=/usr --sysconfdir=/etc --enable-auth-sasldb --with-dbpath=/var/lib/sasl/sasldb2 --with-saslauthd=/var/run/saslauthd --with-ldap
 	$(MAKE) -C cyrus-sasl-2.1.27
@@ -6,7 +17,7 @@ all: saslauthd-service saslauthd-service
 	cd cyrus-sasl-2.1.27 && install -v -dm755                          /usr/share/doc/cyrus-sasl-2.1.27/html
 	cd cyrus-sasl-2.1.27 && install -v -m644  saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-2.1.27 
 	cd cyrus-sasl-2.1.27 && install -v -m644  doc/html/*.html          /usr/share/doc/cyrus-sasl-2.1.27/html
-	cd cyrus-sasl-2.1.27 && install -v -dm700 /var/lib/sasl
+	cd cyrus-sasl-2.1.27 && install -v -dm750 -g saslauth /var/lib/sasl
 	@echo "$$SASLAUTHD_CONFIG" > /etc/default/saslauthd
 	@echo "d /run/saslauthd 755 root root -" > /usr/lib/tmpfiles.d/saslauthd.conf
 	@echo "$$SASLAUTHD_SERVICE" > /lib/systemd/system/saslauthd.service