[dovecot] dovecot and grsecurity (problem with resource limits)

Heiko Zuerker heiko at zuerker.org
Sun Apr 27 03:05:51 EEST 2003


Howdy folks !

I just added Dovecot as a standard package to Devil-Linux and ran into a 
problem with resource limits.
Grsecurity (http://www.grsecurity.net) is used in DL to prevent problems 
with common exploits, it also reports violations of rlimits.

The following messages show up in the log, but it seems that the IMAP 
Server works fine:

Apr 26 19:20:04 src at gate imap-login: Login: hz [192.168.0.11]
Apr 26 19:20:05 src at gate kernel: grsec: attempted resource overstep by 
requesting 37 for RLIMIT_NPROC against limit 0 by (dovecot:10246) UID(0) 
EUID(0), parent (dovecot:634) UID(0) EUID(0)
Apr 26 19:22:18 src at gate kernel: grsec: attempted resource overstep by 
requesting 37 for RLIMIT_NPROC against limit 0 by (dovecot:19802) UID(0) 
EUID(0), parent (dovecot:634) UID(0) EUID(0)
Apr 26 19:22:18 src at gate imap-login: Login: hz [192.168.0.11]
Apr 26 19:26:36 src at gate syslog-ng[606]: STATS: dropped 0
Apr 26 19:28:19 src at gate kernel: grsec: attempted resource overstep by 
requesting 33 for RLIMIT_NPROC against limit 0 by (dovecot:16011) UID(0) 
EUID(0), parent (dovecot:634) UID(0) EUID(0)

How should we proceed to analyze/fix this problem?

Thanks!
   Heiko




More information about the dovecot mailing list