Hello,

Am Freitag, 22. April 2016, 13:44:41 CEST schrieb Carlos E. R.:
> On 2016-04-22 13:19, Carlos E. R. wrote:
...
> > Something else is broken here, because everytime I run "aa-logprof"
> > I see the same error, even though I save the changes. But dovecot is
> > working.
>
> Not quite:
> 
>  <2.3> 2016-04-22 13:19:26 Telcontar dovecot - - - master: Error:
> service(auth): command startup failed, throttling for 2 secs <2.2>
> 2016-04-22 13:19:26 Telcontar dovecot - - - auth: Fatal: master:
> service(auth): child 9680 killed with signal 9 <2.6> 2016-04-22
> 13:19:26 Telcontar dovecot - - - imap-login: Disconnected: Auth
> process broken (disconnected before greeting, waited 0 secs):
> user=<>, rip=192.168.1.14, lip=192.168.1.14, secured, session
> <uZvz/xAxbwDAqAEO>

Can you check if you still get dovecot-related events in 
/var/log/audit/audit.log? (tail -f while restarting and using dovecot)
If in doubt, paste the log lines in your next mail or on 
paste.opensuse.org (if it's more than 20 lines).

Also try to (temporarily) remove the vsz_limit and default_vsz_limit 
settings in your dovecot config to see if they are causing this problem.

BTW: 

> In fact, the change has been applied to
> /etc/apparmor.d/usr.sbin.dovecot several times:
> 
>  capability           setuid,
>   capability           sys_chroot,
>   capability       sys_resource,
>   capability      sys_resource,
>   capability     sys_resource,
>   capability    sys_resource,
>   capability   sys_resource,
>   capability  sys_resource,
>   capability sys_resource,

*lol*

I know the 2.8.x AppArmor tools have quite some bugs (that's one of the 
reasons why they were rewritten in python for 2.9), but I'm not sure if 
I have ever seen this one. 
Anyway, the profile clearly allows the sys_resource capability ;-))
(having 10 similar lines for it doesn't hurt)


Regards,

Christian Boltz
-- 
> Ich hab letztens nen Film gesehen, in dem sich zwei Irre unterhalten
> haben. Da hat der eine den anderen auch nicht verstanden.
Stimmt, hast Recht. Wann haben wir ├╝brigens wieder Freigang? ;)
[> Martin Borchert und Bernd Brodesser in suse-linux]

_______________________________________________
Evergreen mailing list
Evergreen@lists.rosenauer.org
http://lists.rosenauer.org/mailman/listinfo/evergreen

Reply via email to