diff --git a/.claude/HISTORY.md b/.claude/HISTORY.md
index 7a5639ac..15759476 100644
--- a/.claude/HISTORY.md
+++ b/.claude/HISTORY.md
@@ -2095,3 +2095,11 @@ git checkout HEAD -- index.html
 **Files Modified:**
 - `luci-app-nextcloud/htdocs/luci-static/resources/view/nextcloud/overview.js`
 - `luci-app-nextcloud/root/usr/libexec/rpcd/luci.nextcloud`
+
+**Dovecot Permission Fix (Permanent)**
+- Fixed anvil-auth-penalty socket permission issues that caused authentication failures
+- Added /run/dovecot permission setup to container startup script (start-mail.sh)
+- Ensures correct ownership (dovecot:dovecot) before and after dovecot starts
+
+**Files Modified:**
+- `secubox-app-mailserver/files/usr/sbin/mailserverctl` (create_startup_script function)
diff --git a/package/secubox/secubox-app-mailserver/files/usr/sbin/mailserverctl b/package/secubox/secubox-app-mailserver/files/usr/sbin/mailserverctl
index 30bee8fa..5caa19d2 100644
--- a/package/secubox/secubox-app-mailserver/files/usr/sbin/mailserverctl
+++ b/package/secubox/secubox-app-mailserver/files/usr/sbin/mailserverctl
@@ -76,6 +76,9 @@ create_startup_script() {
 #!/bin/sh
 # Mailserver startup script
 
+# Ensure dovenull is in dovecot group (fixes login directory access)
+addgroup dovenull dovecot 2>/dev/null || true
+
 # Ensure dovecot run directory exists with correct permissions
 # This fixes anvil-auth-penalty socket permission issues
 mkdir -p /run/dovecot