Hi, folks.  We've just started running the dovecot IMAP server on an SL
5 (x86_64) system.  We're having trouble connecting to the server
because selinux won't allow it.  I've appended some example messages.

If we run the indicated sealert commands, we get some potentially useful
information, but I wonder if anybody has a convenient summary of the
steps required to permanently allow access to dovecot.  If so, will you
please send them to me?  Thanks.

					- Mike


Nov 13 23:47:23 xxxxxx setroubleshoot:      SELinux is preventing
/usr/sbin/dovecot (dovecot_t) "create" access to <Unknown> (dovecot_t).
For complete SELinux messages. run sealert -l
0922d4d2-9c18-415c-9a44-79cc297d0aeb
Nov 13 23:56:08 xxxxxx dbus: Can't send to audit system: USER_AVC avc:
received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?,
addr=?, terminal=?)
Nov 13 23:56:09 xxxxxx setsebool: The dovecot_disable_trans policy
boolean was changed to 1 by root
Nov 14 00:00:54 xxxxxx setroubleshoot:      SELinux is preventing
/usr/libexec/dovecot/dovecot-auth (dovecot_auth_t) "execute" to
unix_update (sbin_t).      For complete SELinux messages. run sealert -l
5ad4f704-d199-4c23-9cba-4cf5f71b133d

--
Michael Hannon            mailto:[log in to unmask]
Dept. of Physics          530.752.4966
University of California  530.752.4717 FAX
Davis, CA 95616-8677