dovecot issues

[Daniel J Walsh]

Yes if all content under /var/spool/indexes is owned by dovecot, you
should change the label to dovecot_spool_t.

# semanage fcontext -a -t dovecot_spool_t '/var/spool/indexes(/.*)?'
# restorecon -R -v /var/spool/indexes

On 04/22/2014 01:44 PM, m.roth at 5-cent.us wrote:
> CentOS 6.5, selinux-policy-targeted 3.7.19-231.
>
> We have many years of /var/spool/indexes/<user>/... They're currently all
> dovecot_t. grep imap /var/log/audit/audit.log | audit2allow tells me "The
> source type 'dovecot_t' can write to a 'dir' of the following types: #
> dovecot_tmp_t, user_home_t, dovecot_spool_t, mail_home_rw_t,
> dovecot_var_log_t, dovecot_var_run_t, mail_spool_t, cluster_conf_t, nfs_t
>
> So, is this trying to tell me that I need to relabel *everything* down
> there as something else - dovecot_spool_t, or what?
>
>        mark
>
>
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
>
>