Yes if all content under /var/spool/indexes is owned by dovecot, you
should change the label to dovecot_spool_t.
# semanage fcontext -a -t dovecot_spool_t '/var/spool/indexes(/.*)?'
# restorecon -R -v /var/spool/indexes
On 04/22/2014 01:44 PM, m.roth(a)5-cent.us wrote:
CentOS 6.5, selinux-policy-targeted 3.7.19-231.
We have many years of /var/spool/indexes/<user>/... They're currently all
dovecot_t. grep imap /var/log/audit/audit.log | audit2allow tells me "The
source type 'dovecot_t' can write to a 'dir' of the following types: #
dovecot_tmp_t, user_home_t, dovecot_spool_t, mail_home_rw_t,
dovecot_var_log_t, dovecot_var_run_t, mail_spool_t, cluster_conf_t, nfs_t
So, is this trying to tell me that I need to relabel *everything* down
there as something else - dovecot_spool_t, or what?
selinux mailing list