Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-28 Thread Robert Moskowitz
Gordon, Thank you for your help on this. Still not working... On 04/26/2017 06:27 PM, Gordon Messmer wrote: On 04/26/2017 12:29 AM, Robert Moskowitz wrote: But the policy generates errors. I will have to submit a bug report, it seems A bug report would probably be helpful. I'm looking b

[CentOS] SAN certificates for multiple domains and multiple services

2017-04-28 Thread Nicolas Kovacs
Hi, I'm currently installing and configuring CentOS 7 on a public server. The machine will host a few small-to-midsize projects that are currently running on a handful of Slackware servers: public library databases, our public school's agenda, a small webradio, OwnCloud for myself and a local non-

Re: [CentOS] SAN certificates for multiple domains and multiple services

2017-04-28 Thread Alice Wonder
I'm not sure I understand fully what you are doing but for postfix, use self-signed certs. I have a script for generating a self-signed X.509v3 with SAN https://github.com/AliceWonderMiscreations/SimpleCA/blob/master/keyGenMX_Dane.sh (that project is not even close to being ready yet, ignore t

Re: [CentOS] SAN certificates for multiple domains and multiple services

2017-04-28 Thread Gordon Messmer
On 04/28/2017 01:37 AM, Nicolas Kovacs wrote: So before I go any further with this, I'm asking the more technically proficient admins here. Are there any drawbacks to using this solution? Until you run in to the limit of 100 domains per cert, I think the process you described is preferred.

Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-28 Thread Gordon Messmer
On 04/28/2017 12:06 AM, Robert Moskowitz wrote: Here are the messages I got: type=AVC msg=audit(1493361695.041:49205): avc: denied { rlimitinh } for pid=3047 comm="cleanup" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_cleanup_t:s0 tclass=process permi

Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-28 Thread me
On Fri, 28 Apr 2017, Gordon Messmer wrote: On 04/28/2017 12:06 AM, Robert Moskowitz wrote: Here are the messages I got: type=AVC msg=audit(1493361695.041:49205): avc: denied { rlimitinh } for pid=3047 comm="cleanup" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system