Le 14 juil. 2019 à 11:58, Reio Remma reio@mrstuudio.ee a écrit :

On 14.07.2019 10:10, Jean-Daniel via dovecot wrote:

...

Hello,

I want to monitor dovecot stats, and so I have an exporter process that run with limited rights. The monitoring user has only access to /var/run/dovecot/stats-reader and it works fine. Doveadm stats dump returns the list of all stats as expected.

But each time I run doveadm stats dump, it logs the following error:

Error: net_connect_unix(/var/run/dovecot/stats-writer) failed: Permission denied

So what is the purpose of the stats-writer socket, and why doveadm try to open it to simply dump stats ? Is it really something it needs and I should update my user permissions or is it a doveadm bug ?

Hello!

Depending on the system you're running on, there may be SELinux etc. doing its work.

I know why stats-writer is not accessible, this is on purpose (doveadm run with a uid that explicitly don’t have access to stats-writer).

What I want to know is why does doveadm even try to open it to simply dump the stats.