On Mon, Apr 28, 2014 at 9:30 AM, Steffen Kaiser < skdovecot@smail.inf.fh-brs.de> wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On Mon, 28 Apr 2014, Chris Vaas wrote:

I just looked into my SELinux audit log and found the following denial.

...

type=AVC msg=audit(1398609990.493:280): avc: denied { name_connect } for pid=5964 comm="auth" dest=5432 scontext=unconfined_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:postgresql_port_t:s0 tclass=tcp_socket

There seems to be a good chance, that this is my problem, doesn't it? But how can I allow the connection?

I don't run SELinux, checkout a SELinux HowTo, e.g. http://wiki.centos.org/HowTos/SELinux, audit2allow looks promising.

• -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBU14Dj3z1H7kL/d9rAQKtdwf/d4mIe45sOFRkOc+BGfhD/PSYOKK9Akk9 xRofzDZszgj/I9w1T5AWrND3Xn3RfXmCA3MuvEG4L3JAIznuPJWAATkV1XMw56v5 pe4Z6SRB9aH6QZFvmDBfO5pEVrsGoXYeDCY78rZhSERXXgutCDuWHhQUK6pnnXTY m2lumWt6w1mHpvLZZ5gxd2MjZiDZqYJYhhDbMGxb6lcVN42WJgfD5Lm1J000F6Pq pbwCR+2lz2W9tBTCChJqTwIMebUhxesUQxcmFrh9/0/tR7b5hKkEY2o9OtDxRGt6 A6qE/9H82peC64AtV7Cn6rbEJ76HVSCWMP9lLOhmiflpP3cwF+d7VA== =aI5S -----END PGP SIGNATURE-----

Bam. Works!

Thank you very much, everyone!

Cheers Chris