Hi,
this happens since a few days on a Gentoo hardened system using a grsecurity enabled kernel running Dovecot 1.0.10, only to 2 of 10 users though:
--8<--
kernel: grsec: From 192.168.0.1: denied resource overstep by
requesting 537325568 for RLIMIT_AS against limit 536870912
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574]
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by
requesting 537321472 for RLIMIT_AS against limit 536870912
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574]
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by
requesting 537456640 for RLIMIT_AS against limit 536870912
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574]
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by
requesting 537321472 for RLIMIT_AS against limit 536870912
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574]
uid/euid:0/0 gid/egid:0/0
dovecot: IMAP(info): block_alloc(): Out of memory
dovecot: child 15708 (imap) returned error 83 (Out of memory)
--8<--
grsecurity only logs the attempted resource overstep.
I already increased mail_process_size to 512M and deleted the index.cache* files inside the users maildir -- didn't help :/
Any idea why this is happening or how I could find out?
TIA :)
Regards, Wolfram Schlich wschlich@gentoo.org Gentoo Linux * http://dev.gentoo.org/~wschlich/