[Dovecot] SELinux and "i_stream_read() failed: Permission denied"

[James Butler]

> On Thu, 2009-04-16 at 17:01 -0700, James Butler wrote:
>> > But there's no dovecot.deliver anymore in v1.2:
>> >
>> > ~/cvs/dovecot-1.2/src/deliver% grep dovecot.deliver deliver
>> > ~/cvs/dovecot-1.2/src/deliver%
>> >
>> > It is in v1.1 though.
>> >
>>
>> I have no answer for you, except:
>>
>> # dovecot -n
>> - 1.2.rc2: /usr/local/etc/dovecot.conf
>
> That doesn't necessarily mean that your deliver binary is the same
> version as dovecot. For example do you happen to be using deliver binary
> from another directory than /usr/local/libexec/dovecot/? Try grepping
> "1.2.rc2" and "dovecot.deliver" from the deliver binary to see if it
> contains either string.
>
>> # ls -la /tmp
>> total 104
>> -rw-------  1 user dovecot     0 2009-04-15 15:47
>> dovecot.deliver..1239835658.9325.c6f5c942d0424f70
>
> Hmm. Is this before you allowed unlinking or does it still happen
> afterwards? These shouldn't be visible since they're created and
> immediately unlinked afterwards.
>

D'oh!

[root at ltfs450 root]# cd /usr/local/libexec/dovecot
[root at ltfs450 dovecot]# grep dovecot.deliver deliver
[root at ltfs450 dovecot]# grep 1.2.rc2 deliver
Binary file deliver matches

HOWEVER, in my /etc/postfix/main.cf, I called a different binary:

mailbox_command = /usr/bin/spamc -f -e /usr/libexec/dovecot/deliver

[root at ltfs450 root]# cd /usr/libexec/dovecot
[root at ltfs450 dovecot]# grep dovecot.deliver deliver
Binary file deliver matches
[root at ltfs450 dovecot]# grep 1.1 deliver
Binary file deliver matches

I was running the old version of deliver.
Thanks for clearing that up, Timo.

James