Re: [Dovecot] Dovecot + SELinux permission problems - Virtual user permissions?

2013-08-19 Thread Johnny
Sorry about the delays on following up on this, I am really struggling to get somewhere, but have made some minor progress, see below. I am now starting to suspect that it may be a problem that I have a virtual user in dovecot trying to access a maildir owned by the system user. Although the mai

Re: [Dovecot] Dovecot + SELinux permission problems

2013-06-24 Thread Thomas Harold
On 6/24/2013 9:58 AM, Johnny wrote: Yes, /var/log/audit/ with audit.log. There are some archived logs as well, but no recent messages regarding dovecot perms. Typically you could use "sealert -a /var/log/audit/audit.log /var/log/audit/audit.log.1" to get a feel for how many SELinux exceptions

Re: [Dovecot] Dovecot + SELinux permission problems

2013-06-23 Thread Johnny
Jan-Frode Myklebust writes: > On Sun, Jun 23, 2013 at 04:21:17PM +0100, Johnny wrote: >> >> I had thought SELinux would log something, but /var/log/audit/audit.log >> is blank... > > Are you running auditd? I believe that if you're not running auditd, the > denials should be logged to the kernel

Re: [Dovecot] Dovecot + SELinux permission problems

2013-06-23 Thread Jan-Frode Myklebust
On Sun, Jun 23, 2013 at 04:21:17PM +0100, Johnny wrote: > > I had thought SELinux would log something, but /var/log/audit/audit.log > is blank... Are you running auditd? I believe that if you're not running auditd, the denials should be logged to the kernel ring buffer. Does "dmesg" show any deni