[dovecot] dovecot and grsecurity (problem with resource limits)
Heiko Zuerker
heiko at zuerker.org
Sun Apr 27 03:05:51 EEST 2003
Howdy folks !
I just added Dovecot as a standard package to Devil-Linux and ran into a
problem with resource limits.
Grsecurity (http://www.grsecurity.net) is used in DL to prevent problems
with common exploits, it also reports violations of rlimits.
The following messages show up in the log, but it seems that the IMAP
Server works fine:
Apr 26 19:20:04 src at gate imap-login: Login: hz [192.168.0.11]
Apr 26 19:20:05 src at gate kernel: grsec: attempted resource overstep by
requesting 37 for RLIMIT_NPROC against limit 0 by (dovecot:10246) UID(0)
EUID(0), parent (dovecot:634) UID(0) EUID(0)
Apr 26 19:22:18 src at gate kernel: grsec: attempted resource overstep by
requesting 37 for RLIMIT_NPROC against limit 0 by (dovecot:19802) UID(0)
EUID(0), parent (dovecot:634) UID(0) EUID(0)
Apr 26 19:22:18 src at gate imap-login: Login: hz [192.168.0.11]
Apr 26 19:26:36 src at gate syslog-ng[606]: STATS: dropped 0
Apr 26 19:28:19 src at gate kernel: grsec: attempted resource overstep by
requesting 33 for RLIMIT_NPROC against limit 0 by (dovecot:16011) UID(0)
EUID(0), parent (dovecot:634) UID(0) EUID(0)
How should we proceed to analyze/fix this problem?
Thanks!
Heiko
More information about the dovecot
mailing list