Hello,
I think I submitted this before, but I am not sure this has been addressed
I am using AppArmor with Dovecot, without any issue.
However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails.
Can someone double check the code of the indexer worker, or this has been fixed?
Thanks, André
On 9 Dec 2018, at 16.44, André Rodier via dovecot dovecot@dovecot.org wrote:
Hello,
I think I submitted this before, but I am not sure this has been addressed
I am using AppArmor with Dovecot, without any issue.
However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails.
Can someone double check the code of the indexer worker, or this has been fixed?
Dovecot is definitely not trying to open that file itself. It has to be libc or some other library. I also can't think of anything special in indexer-worker compared to other Dovecot binaries that could cause this. What's your doveconf -n?
On 2018-12-09 23:13, Timo Sirainen wrote:
On 9 Dec 2018, at 16.44, André Rodier via dovecot dovecot@dovecot.org wrote:
Hello,
I think I submitted this before, but I am not sure this has been addressed
I am using AppArmor with Dovecot, without any issue.
However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails.
Can someone double check the code of the indexer worker, or this has been fixed?
Dovecot is definitely not trying to open that file itself. It has to be libc or some other library. I also can't think of anything special in indexer-worker compared to other Dovecot binaries that could cause this. What's your doveconf -n?
You are probably right, I will continue to investigate on my side. My configuration is attached.
On 10 Dec 2018, at 7.50, André Rodier andre@rodier.me wrote:
On 2018-12-09 23:13, Timo Sirainen wrote:
Hello, I think I submitted this before, but I am not sure this has been addressed I am using AppArmor with Dovecot, without any issue. However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails. Can someone double check the code of the indexer worker, or this has been fixed? Dovecot is definitely not trying to open that file itself. It has to be libc or some other library. I also can't think of anything special in indexer-worker compared to other Dovecot binaries that could cause
On 9 Dec 2018, at 16.44, André Rodier via dovecot dovecot@dovecot.org wrote: this. What's your doveconf -n?
You are probably right, I will continue to investigate on my side. My configuration is attached.
Does it make a difference if you use "127.0.0.1" instead of "localhost" in fts_solr setting?
Hello Timo,
I will try this evening.
Kind regards, André.
On 10 December 2018 07:56:26 GMT+00:00, Timo Sirainen tss@iki.fi wrote:
On 10 Dec 2018, at 7.50, André Rodier andre@rodier.me wrote:
On 2018-12-09 23:13, Timo Sirainen wrote:
On 9 Dec 2018, at 16.44, André Rodier via dovecot
Hello, I think I submitted this before, but I am not sure this has been addressed I am using AppArmor with Dovecot, without any issue. However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13
dovecot@dovecot.org wrote: profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails. Can someone double check the code of the indexer worker, or this has been fixed? Dovecot is definitely not trying to open that file itself. It has to be libc or some other library. I also can't think of anything special in indexer-worker compared to other Dovecot binaries that could cause this. What's your doveconf -n?
You are probably right, I will continue to investigate on my side. My configuration is attached.
Does it make a difference if you use "127.0.0.1" instead of "localhost" in fts_solr setting?
-- André
On 2018-12-10 14:12, André via dovecot wrote:
Hello Timo,
I will try this evening.
Kind regards, André.
On 10 December 2018 07:56:26 GMT+00:00, Timo Sirainen tss@iki.fi wrote:
On 10 Dec 2018, at 7.50, André Rodier andre@rodier.me wrote:
On 2018-12-09 23:13, Timo Sirainen wrote:
On 9 Dec 2018, at 16.44, André Rodier via dovecot
Hello, I think I submitted this before, but I am not sure this has been addressed I am using AppArmor with Dovecot, without any issue. However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See:
Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13
dovecot@dovecot.org wrote: profile="/usr/lib/dovecot/indexer-worker" name="var/cache/nscd/hosts" pid=10540 comm="indexer-worker" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
The indexer worker is trying to open the file "var/cache/nscd/hosts" instead of "/var/cache/nscd/hosts", which of course fails. Can someone double check the code of the indexer worker, or this has been fixed? Dovecot is definitely not trying to open that file itself. It has to be libc or some other library. I also can't think of anything special in indexer-worker compared to other Dovecot binaries that could cause this. What's your doveconf -n?
You are probably right, I will continue to investigate on my side. My configuration is attached.
Does it make a difference if you use "127.0.0.1" instead of "localhost" in fts_solr setting?
Sorry for the top-posting.
Same error, with 127.0.0.1.
However, if I disable the nscd cache in nscd.conf, the error does not happen any more.
I have downloaded the source code (glibc, if I understand correctly), but I have not yet found the cause.
Kind regards, André
participants (3)
-
André
-
André Rodier
-
Timo Sirainen